PT-2008-5959 · Kvirc · Kvirc

Gjoko Krstic + 1 · Published 2008-10-27 · Updated 2024-06-15 · CVE-2008-4748

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions KVirc version 3.4.0

Description The issue is related to a format string vulnerability in the URI handler. This vulnerability can be exploited by remote attackers who send specially crafted irc:// URIs containing format string specifiers, potentially leading to a denial of service (application crash) and possibly the execution of arbitrary code.

Recommendations For KVirc version 3.4.0, consider disabling the URI handler for irc:// until a patch is available to prevent potential exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-4748

OPENSUSE-SU-2024:10906-1

Affected Products

Kvirc

References · 9

• 🔥 https://exploit-db.com/exploits/6832 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-4748 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:10906-1 · Vendor Advisory
• http://secunia.com/advisories/32410 · Vendor Advisory
• http://securityreason.com/securityalert/4508 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46114 · Note
• http://securityfocus.com/bid/31912 · Note
• https://suse.com/security/cve/CVE-2008-4748 · Note
• http://vupen.com/english/advisories/2008/2926 · Note