CVE-2007-2951
Publication date 26 June 2007
Last updated 17 July 2025
Ubuntu priority
Description
The parseIrcUrl function in src/kvirc/kernel/kvi_ircurl.cpp in KVIrc 3.2.0 allows user-assisted remote attackers to execute arbitrary commands via shell metacharacters in an (1) irc:// or (2) irc6:// URI.