CVE-2008-7070

2009-08-2500:00:00

ubuntu.com

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.041 Low

EPSS

Percentile

92.2%

JSON

Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny
allows remote attackers to execute arbitrary commands via a " (quote)
followed by command line switches in a (1) irc:///, (2) irc6:///, (3)
ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an
incomplete fix for CVE-2007-2951.