CVE catalog
CVE-2008-7070
kvirc: CVE-2008-7070
- Severity
- Low
- Source
- [NVD] · [CVE record]
- EPSS
- 5.05% · Oct 25, 2026
Argument injection vulnerability in the URI handler in KVIrc 3.4.2 Shiny allows remote attackers to execute arbitrary commands via a " (quote) followed by command line switches in a (1) irc:///, (2) irc6:///, (3) ircs:///, or (4) and ircs6:/// URI. NOTE: this might be due to an incomplete fix for CVE-2007-2951.
Vulnerable and fixed packages
Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.
| Distribution | Package | Release | Version | Status |
|---|---|---|---|---|
| Debian | kvirc | sid | 4:5.2.10-2 | not affected |
| Debian | kvirc | forky | 4:5.2.10-2 | not affected |
| Debian | kvirc | trixie | 4:5.2.6-2 | not affected |
| Debian | kvirc | bookworm | 4:5.0.0+dfsg-6 | not affected |
Fixed-version evidence
| Distribution | Package | Type | Release | Fixed version | Urgency | Origin | Bugs |
|---|---|---|---|---|---|---|---|
| Debian | kvirc | source | sid | Not affected | unimportant | Not reported | Not reported |
| Debian | kvirc | source | forky | Not affected | unimportant | Not reported | Not reported |
| Debian | kvirc | source | trixie | Not affected | unimportant | Not reported | Not reported |
| Debian | kvirc | source | bookworm | Not affected | unimportant | Not reported | Not reported |
OpenFactory catalog packages
[Debian 12 (Bookworm)]
- [kvirc]Not affected
Source package: [kvirc]
Details (2)
4:5.0.0+dfsg-6+b5· amd64 · bookwormNot affected
dsa · kvirc · debian · bookworm
4:5.0.0+dfsg-6+b5· arm64 · bookwormNot affected
dsa · kvirc · debian · bookworm
- [kvirc-data]Not affected
Source package: [kvirc]
Details (2)
4:5.0.0+dfsg-6· all · bookwormNot affected
dsa · kvirc · debian · bookworm
4:5.0.0+dfsg-6· all · bookwormNot affected
dsa · kvirc · debian · bookworm
- [kvirc-modules]Not affected
Source package: [kvirc]
Details (2)
4:5.0.0+dfsg-6+b5· amd64 · bookwormNot affected
dsa · kvirc · debian · bookworm
4:5.0.0+dfsg-6+b5· arm64 · bookwormNot affected
dsa · kvirc · debian · bookworm
- [libkvilib5]Not affected
Source package: [kvirc]
Details (2)
4:5.0.0+dfsg-6+b5· amd64 · bookwormNot affected
dsa · kvirc · debian · bookworm
4:5.0.0+dfsg-6+b5· arm64 · bookwormNot affected
dsa · kvirc · debian · bookworm
Observed: