CVE-2008-4748
Last modified
CVE-2008-4748 is a vulnerability of currently unknown severity. Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI.. EPSS estimates a 8.16% chance of exploitation in the next 30 days.
Description
Format string vulnerability in the URI handler in KVirc 3.4.0, when set as the default application for processing IRC URIs, allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via format string specifiers in the irc:// URI.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Kvirc | Kvirc | 3.4.0 |
References
- http://secunia.com/advisories/32410Vendor Advisory
- http://secunia.com/advisories/32410Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4748?
How severe is CVE-2008-4748?
How do I fix CVE-2008-4748?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4742Multiple cross-site scripting (XSS) vulnerabilities in inter…
- CVE-2008-4743SQL injection vulnerability in index.php in QuidaScript FAQ …
- CVE-2008-4744SQL injection vulnerability in product_detail.php in DXShopC…
- CVE-2008-4745Cross-site scripting (XSS) vulnerability in emailFriend.asp …
- CVE-2008-4746Multiple SQL injection vulnerabilities in Uniwin eCart Profe…
- CVE-2008-4747Unspecified vulnerability in the search feature in Sun Java …
- CVE-2008-4749Multiple insecure method vulnerabilities in the VImpX.VImpAX…
- CVE-2008-4750Stack-based buffer overflow in the VImpX.VImpAX ActiveX cont…
- CVE-2008-4751Cross-site scripting (XSS) vulnerability in index.php in iPe…
- CVE-2008-4752TlNews 2.2 allows remote attackers to bypass authentication …
- CVE-2008-4753SQL injection vulnerability in EditUrl.php in AJ Square RSS …
- CVE-2008-4754SQL injection vulnerability in forum.php in Scripts for Site…
Are you affected by CVE-2008-4748?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST