Vulnerability Details CVE-2006-3573
Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a player nickname.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.057
EPSS Ranking 92.2%
CVSS Severity
CVSS v2 Score 10.0
References
- http://aluigi.altervista.org/adv/sparkletfs-adv.txt
- http://secunia.com/advisories/20974
- http://securitytracker.com/id?1016443
- http://www.osvdb.org/27038
- http://www.securityfocus.com/archive/1/439475/100/100/threaded
- http://www.securityfocus.com/bid/18862
- http://www.securityfocus.com/bid/18949
- http://www.vupen.com/english/advisories/2006/2695
- http://www.vupen.com/english/advisories/2006/2763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27603
- http://aluigi.altervista.org/adv/sparkletfs-adv.txt
- http://secunia.com/advisories/20974
- http://securitytracker.com/id?1016443
- http://www.osvdb.org/27038
- http://www.securityfocus.com/archive/1/439475/100/100/threaded
- http://www.securityfocus.com/bid/18862
- http://www.securityfocus.com/bid/18949
- http://www.vupen.com/english/advisories/2006/2695
- http://www.vupen.com/english/advisories/2006/2763
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27603
Products affected by CVE-2006-3573
-
cpe:2.3:a:milan_mimica:sparklet:*