{"action":"Upgrade kvirc to 4:4.0.0-3 or later.","affected":[{"fixed":"4:4.0.0-3","introduced":"0"}],"component":"kvirc","cve_ids":[],"ecosystem":"Debian","ecosystem_qualifier":"Debian:12","exploited":false,"fixed_versions":["4:4.0.0-3"],"id":"tcs_01M5N9K6DJXY4AJ6NMC60C49HT","modified_at":"2026-10-23T17:47:43.750889909Z","published_at":"2010-08-02T20:40:01.560Z","references":["https://osv.dev/vulnerability/DEBIAN-CVE-2010-2785","https://security-tracker.debian.org/tracker/CVE-2010-2785"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"DEBIAN-CVE-2010-2785","url":"https://osv.dev/vulnerability/DEBIAN-CVE-2010-2785"}],"summary":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors i"}