NVD

Id
6801  
Name
CVE-2008-7070  
Description
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-03  
Published
2009-08-25  
Modified Date
2010-06-30  
Seq
2008-7070  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
38779 6801 CVE-2008-7070 http://retrogod.altervista.org/kvirc_342_cmd.html  View
38780 6801 CVE-2008-7070 7181  View
38781 6801 CVE-2008-7070 20081121 KVIrc 3.4.2 Shiny (uri handler) remote command execution exploit  View
38782 6801 CVE-2008-7070 32410  View
38783 6801 CVE-2008-7070 kvirc-multiple-uri-command-execution(46779)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
43343 JVNDB-2009-004350 KVIrc Shiny の URI ハンドラにおける任意のコマンドを実行される脆弱性 KVIrc Shiny の URI ハンドラは、引数の挿入により、任意のコマンドを実行される脆弱性が存在します。 CVE-2008-7070 37183 CVE-2008-7070 6801 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-004350.html 2009-08-25 2012-09-25 View