{"id":"CVE-2010-2785","aliases":["DEBIAN-CVE-2010-2785","DSA-2078-1","EUVD-2010-2789","GHSA-f56f-xchc-vpm3","openSUSE-SU-2024:10245-1"],"status":"published","title":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ ...","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","severity":{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.07574,"percentile":0.94566,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"published":"2010-07-31T00:00:00Z","modified":"2026-10-23T17:47:43Z","exploits":[{"source":"exploitdb","id":"EDB-34385","title":"KVIrc 4.0 - '\\r' Carriage Return in DCC Handshake Remote Command Execution","type":"remote","platform":"linux","date":"2010-07-28","verified":true,"url":"https://www.exploit-db.com/exploits/34385"}],"fixes":[{"ecosystem":"Debian:12","package":"kvirc","fixed_in":["4:4.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"kvirc","fixed_in":["4:4.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"kvirc","fixed_in":["4:4.0.0-3"],"sources":["osv"]},{"ecosystem":"Debian:5.0","package":"kvirc","fixed_in":["2:3.4.0-6"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"kvirc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"kvirc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"kvirc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"4:4.0.0-3"}]}]},{"source":"osv","ecosystem":"Debian:5.0","package":"kvirc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2:3.4.0-6"}]}],"versions":["2:3.4.0-3","2:3.4.0-5"]}],"products":[{"vendor":"kvirc","product":"kvirc"}],"references":[{"url":"http://bugs.gentoo.org/show_bug.cgi?id=330111","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044643.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"http://secunia.com/advisories/40796","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"http://www.osvdb.org/66648","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"https://svn.kvirc.de/kvirc/changeset/4693","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://marc.info/?l=oss-security\u0026m=128041011428629\u0026w=2","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://lists.opensuse.org/opensuse-security-announce/2010-08/msg00001.html","tags":["vendor-advisory","x_refsource_SUSE","x_transferred","web"]},{"url":"http://openwall.com/lists/oss-security/2010/07/28/1","tags":["mailing-list","x_refsource_MLIST","x_transferred","Patch","fix"]},{"url":"http://secunia.com/advisories/40727","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory","advisory"]},{"url":"https://svn.kvirc.de/kvirc/ticket/858","tags":["x_refsource_CONFIRM","x_transferred","Patch","fix"]},{"url":"http://lists.fedoraproject.org/pipermail/package-announce/2010-July/044625.html","tags":["vendor-advisory","x_refsource_FEDORA","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2010-2785"},{"url":"https://github.com/advisories/GHSA-f56f-xchc-vpm3"},{"url":"https://security-tracker.debian.org/tracker/CVE-2010-2785","tags":["advisory"]},{"url":"","tags":["advisory"]},{"url":"https://www.suse.com/security/cve/CVE-2010-2785","tags":["web"]}],"sources":{"cve":[{"id":"CVE-2010-2785","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2010-08-02T19:00:00Z","modified":"2024-08-07T02:46:48.031Z","updated_at":"2026-11-02T14:33:27.01833Z"}],"euvd":[{"id":"EUVD-2010-2789","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2010-08-02T19:00:00Z","modified":"2024-08-07T02:46:48Z","updated_at":"2026-11-03T01:39:36.439258Z"}],"ghsa":[{"id":"GHSA-f56f-xchc-vpm3","title":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ ...","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2022-05-17T05:48:31Z","modified":"2023-01-28T05:04:37Z","updated_at":"2026-11-02T14:44:12.731424Z"}],"nvd":[{"id":"CVE-2010-2785","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2010-08-02T20:40:01.56Z","modified":"2026-06-16T23:21:29.95Z","cvss":[{"version":"2.0","score":6.5,"vector":"AV:N/AC:L/Au:S/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:49.736647Z"}],"osv":[{"id":"CVE-2010-2785","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2010-08-02T20:40:01Z","modified":"2026-04-10T03:41:20.772117Z","updated_at":"2026-11-02T15:43:57.991581Z"},{"id":"DEBIAN-CVE-2010-2785","description":"The IRC Protocol component in KVIrc 3.x and 4.x before r4693 does not properly handle \\ (backslash) characters, which allows remote authenticated users to execute arbitrary CTCP commands via vectors involving \\r and \\40 sequences, a different vulnerability than CVE-2010-2451 and CVE-2010-2452.","status":"published","published":"2010-08-02T20:40:01.56Z","modified":"2026-10-23T17:47:43.750889909Z","updated_at":"2026-11-02T15:45:24.316685Z"},{"id":"DSA-2078-1","title":"kvirc - arbitrary IRC command execution","status":"published","published":"2010-07-31T00:00:00Z","modified":"2026-03-09T01:22:04.196577Z","updated_at":"2026-11-02T15:46:15.108335Z"},{"id":"openSUSE-SU-2024:10245-1","title":"kvirc-4.2.0-6.3 on GA media","description":"These are all security issues fixed in the kvirc-4.2.0-6.3 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2024-06-15T00:00:00Z","modified":"2026-02-04T04:15:36.653164Z","updated_at":"2026-11-02T16:58:33.135986Z"}]}}