VULNERABILITY INTELLIGENCE

CVE-2008-4748

CVSS score7.6 HIGH
EPSS probability8.16%
CISA KEVNot currently listed
Published2008-10-27
Last modified2026-06-16
CVSS vectorAV:N/AC:H/Au:N/C:C/I:C/A:C

Description

Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI.

Weakness classification

  • CWE-20: Improper Input Validation

Primary references