Debian/kvirc: unknown

The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6://

Action: Upgrade kvirc to 2:3.2.4-5 or later.

Affected

Fixed versions

Sources

• osv: DEBIAN-CVE-2007-2951#Debian:13/kvirc
• https://security-tracker.debian.org/tracker/CVE-2007-2951

published 2007-06-26T18:30:00Z · modified 2026-10-21T17:47:48.691957751Z · JSON