CVE-2003-1170

CVE-2003-1170 is a format string vulnerability in kpopup versions 0.9.1 and 0.9.5pre2, specifically within the main.cpp file. This flaw allows local users to trigger a denial of service (segmentation fault) and potentially execute arbitrary code by injecting format string specifiers into command line arguments. With a CVSS score of 7.2, it is considered highly severe due to its low attack complexity and potential for complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, the vulnerability has garnered significant community discussion with 10 mentions, indicating notable awareness despite a lack of media coverage.