CVE-2007-4446

2007-08-2100:00:00

mitre

www.cve.org

AI Score

7.8

Confidence

High

EPSS

0.113

Percentile

95.2%

JSON

Format string vulnerability in the server in Toribash 2.71 and earlier allows remote attackers to execute arbitrary code via format string specifiers in the NICK command (client nickname) when entering a game.

References

aluigi.org/poc/toribashish.zip

secunia.com/advisories/26507

securityreason.com/securityalert/3033

www.securityfocus.com/archive/1/477025/100/0/threaded

www.securityfocus.com/bid/25359