CVE-2008-4748

CVE-2008-4748 describes a format string vulnerability in KVirc 3.4.0's URI handler. When KVirc is configured as the default application for IRC URIs, remote attackers can trigger a denial of service or potentially execute arbitrary code by embedding format string specifiers within an irc:// URI. This vulnerability carries a high CVSS score of 7.6, indicating a network-based attack with high impact on confidentiality, integrity, and availability, though it requires high attack complexity. While there is no evidence of active exploitation or Metasploit/Nuclei modules, a Proof-of-Concept exploit is available on ExploitDB, and community discussion and media coverage are minimal.