PT-2008-5959 · Kvirc · Kvirc

Gjoko Krstic + 1 · Publicado 2008-10-27 · Atualizado 2024-06-15 · CVE-2008-4748

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions KVirc version 3.4.0

Description The issue is related to a format string vulnerability in the URI handler. This vulnerability can be exploited by remote attackers who send specially crafted irc:// URIs containing format string specifiers, potentially leading to a denial of service (application crash) and possibly the execution of arbitrary code.

Recommendations For KVirc version 3.4.0, consider disabling the URI handler for irc:// until a patch is available to prevent potential exploitation.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-4748

OPENSUSE-SU-2024:10906-1

Produtos afetados

Kvirc

Referências · 9

• 🔥 https://exploit-db.com/exploits/6832 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4748 · Nota de Segurança
• http://securityreason.com/securityalert/4508 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46114 · Nota
• http://securityfocus.com/bid/31912 · Nota
• https://suse.com/security/cve/CVE-2008-4748 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10906-1 · Aviso do Fabricante
• http://secunia.com/advisories/32410 · Aviso do Fabricante
• http://vupen.com/english/advisories/2008/2926 · Nota