Launchpad.net

CVE 2010-2452

Directory traversal vulnerability in the DCC functionality in KVIrc 3.4 and 4.0 allows remote attackers to overwrite arbitrary files via unknown vectors.

See the CVE page on Mitre.org for more details.