Approved changes feed: RSS · Atom

cpe:2.3:a:kvirc:irc_client:3.2.0:*:*:*:*:*:*:*

part: a version: 3.2.0 update: *

VendorKvirc (e9784f93-bbed-5ed1-9a56-2a07a297e32a)
ProductIrc Client (74d1f706-6350-57a7-aae1-6a2c52f54183)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/kvirc purl2cpe 2026-06-01 10:16:39.472802
pkg:deb/ubuntu/kvirc purl2cpe 2026-06-01 10:16:39.472804
pkg:github/kvirc/kvirc purl2cpe 2026-06-01 10:16:39.472805
pkg:rpm/fedora/kvirc purl2cpe 2026-06-01 10:16:39.472806
pkg:rpm/opensuse/kvirc purl2cpe 2026-06-01 10:16:39.472808
pkg:sourceforge/kvirc purl2cpe 2026-06-01 10:16:39.472809

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2007-2951 vulnerable 2026-06-08 04:49:46.542713 Details available
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.
Published: 2007-06-26T18:00:00.000Z
Updated: 2024-08-07T13:57:54.655Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.