CVE-2004-1214: Burut Kreed

High severity, CVSS 10.0. EPSS: 6.8% chance of exploitation in the next 30 days.

Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.

Affected products

• Burut Kreed: version 1.5 only

Published 2005-01-10. Last modified 2026-06-16.