GCVE - cpe:2.3:a:kvirc:kvirc:3.4.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:kvirc:kvirc:3.4.0:*:*:*:*:*:*:*

part: a version: 3.4.0 update: *

Vendor	Kvirc (`e9784f93-bbed-5ed1-9a56-2a07a297e32a`)
Product	Kvirc (`0158d305-d771-55fb-9482-92df0be602a2`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/kvirc/kvirc`	purl2cpe	2026-06-01 10:16:39.475311
`pkg:rpm/fedora/kvirc`	purl2cpe	2026-06-01 10:16:39.475313
`pkg:rpm/opensuse/kvirc`	purl2cpe	2026-06-01 10:16:39.475314

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-2785`	vulnerable	2026-06-08 04:55:10.536080	Details available The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452. Published: 2010-08-02T19:00:00.000Z Updated: 2024-08-07T02:46:48.031Z Open on db.gcve.eu Reference links http://bugs.gentoo.org/show_bug.cgi?id=330111 http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044643.html http://secunia.com/advisories/40796 http://www.osvdb.org/66648 https://svn.kvirc.de/kvirc/changeset/4693	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2452`	vulnerable	2026-06-08 04:55:07.689696	Details available Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors. Published: 2010-06-29T18:00:00.000Z Updated: 2024-08-07T02:32:16.606Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html http://www.securityfocus.com/bid/40746 http://www.vupen.com/english/advisories/2010/1602 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-2451`	vulnerable	2026-06-08 04:55:07.687748	Details available Multiple format string vulnerabilities in the DCC functionality in KVIrc 3.4 and 4.0 have unspecified impact and remote attack vectors. Published: 2010-06-29T18:00:00.000Z Updated: 2024-08-07T02:32:16.580Z Open on db.gcve.eu Reference links http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043601.html http://lists.omnikron.net/pipermail/kvirc/2010-May/000867.html http://www.securityfocus.com/bid/40746 http://www.vupen.com/english/advisories/2010/1602 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/043629.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4748`	vulnerable	2026-06-08 04:50:48.071163	Details available Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI. Published: 2008-10-27T19:00:00.000Z Updated: 2024-08-07T10:24:21.033Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/6832 http://www.securityfocus.com/bid/31912 https://exchange.xforce.ibmcloud.com/vulnerabilities/46114 http://securityreason.com/securityalert/4508 http://www.vupen.com/english/advisories/2008/2926	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.