CVE-2005-4846

2022-10-0316:22:43

mitre

www.cve.org

logger.cc

spey 0.3.3

format string vulnerability

denial of service

execute arbitrary code

syslog call

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

51.9%

JSON

Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.

References

sourceforge.net/forum/forum.php?forum_id=514029

spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6

spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log

www.osvdb.org/21327