CVE-2008-2841: Microsoft Internet Explorer

Medium severity, CVSS 6.8. EPSS: 15.4% chance of exploitation in the next 30 days.

Argument injection vulnerability in XChat 2.8.7b and earlier on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary commands via the --command parameter in an ircs:// URI.

Affected products

• Microsoft Internet Explorer: any version
• Xchat Xchat: up to and including 2.8.7b

Published 2008-06-24. Last modified 2026-06-16.