CVE-2007-2951

Publication date 26 June 2007

Last updated 24 July 2024

Ubuntu priority

Unknown

Why this priority?

The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.

Status

No maintained releases are affected by this CVE.

Package Ubuntu Release Status
kvirc 7.04 feisty
Fixed 3.2.4-5ubuntu1.1
6.10 edgy
Fixed 3.2.4-3ubuntu1.1
6.06 LTS dapper
Fixed 3.2.0-5ubuntu1.1