CVE Feed

    Dashboard / CVE / CVE-2000-0787

    CVE-2000-0787

    IRC Xchat client versions 1.4.2 and earlier allows remote attackers to execute arbitrary commands by encoding shell metacharacters into a URL which XChat uses to launch a web browser.

    Published:Aug 17, 2000
    Last Modified:Apr 16, 2026
    EPS:Oct 13, 2000
    EPSS Score:0.08597
    CVSS Score:7.5

    Affected Products

    Vendor
    Xchat
    Product
    Xchat

    Exploits

    https://www.exploit-db.com/exploits/20161

    Common Weakness Enumeration

    No CWE recorded yet

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2013-7449 (CVSS 6.5) — The ssl_do_connect function in common/server.c in HexChat before 2.10.2, XChat, and XChat-GNOME does not verif…
    CVE-2011-5129 (CVSS 5) — Heap-based buffer overflow in XChat 2.8.9 and earlier allows remote attackers to cause a denial of service (cr…
    CVE-2012-0828 (CVSS 9.8) — Heap-based buffer overflow in Xchat-WDK before 1499-4 (2012-01-18) xchat 2.8.6 on Maemo architecture could all…
    CVE-2009-0315 (CVSS 6.9) — Untrusted search path vulnerability in the Python module in xchat allows local users to execute arbitrary code…
    CVE-2008-2841 (CVSS 6.8) — Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allow…
    CVE-2006-4455 (CVSS 5) — Unspecified vulnerability in Xchat 2.6.7 and earlier allows remote attackers to cause a denial of service (cra…
    CVE-2004-0409 (CVSS 7.5) — Stack-based buffer overflow in the Socks-5 proxy code for XChat 1.8.0 to 2.0.8, with socks5 traversal enabled,…
    CVE-2003-1000 (CVSS 7.5) — xchat 2.0.6 allows remote attackers to cause a denial of service (crash) via a passive DCC request with an inv…
    CVE-2002-0382 (CVSS 7.5) — XChat IRC client allows remote attackers to execute arbitrary commands via a /dns command on a host whose DNS …
    CVE-2002-0006 (CVSS 7.5) — XChat 1.8.7 and earlier, including default configurations of 1.4.2 and 1.4.3, allows remote attackers to execu…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High