KVirc 3.4.2
Approved changes feed: RSS · Atom
cpe:2.3:a:kvirc:kvirc:3.4.2:*:*:*:*:*:*:*
part: a version: 3.4.2 update: *
| Vendor | Kvirc (e9784f93-bbed-5ed1-9a56-2a07a297e32a) |
|---|---|
| Product | Kvirc (0158d305-d771-55fb-9482-92df0be602a2) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/kvirc/kvirc |
purl2cpe | 2026-06-01 10:16:39.475316 |
pkg:rpm/fedora/kvirc |
purl2cpe | 2026-06-01 10:16:39.475317 |
pkg:rpm/opensuse/kvirc |
purl2cpe | 2026-06-01 10:16:39.475318 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2010-2785 |
vulnerable | 2026-06-08 04:55:10.537114 |
Details available
The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \r and \40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.
Published: 2010-08-02T19:00:00.000Z
Updated: 2024-08-07T02:46:48.031Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7070 |
vulnerable | 2026-06-08 04:51:05.564532 |
Details available
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.
Published: 2009-08-25T10:00:00.000Z
Updated: 2024-08-07T11:56:13.568Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.