3 matches found
Format string
Format string vulnerability in the ClGetPackets function in clmain.c in the client in Doomsday aka deng 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSVCONSOLETEXT message...
CVE-2007-4644
The CVE-2007-4644 format-string vulnerability affects the Doomsday (deng) client, specifically in Cl_GetPackets() in cl_main.c for Doomsday 1.9.0-beta5.1 and earlier. The flaw allows a remote attacker sending PSV_CONSOLE_TEXT messages to cause arbitrary code execution. Reports (NVD, GLSA 200802-0...
CVE-2007-4644
Format string vulnerability in the ClGetPackets function in clmain.c in the client in Doomsday aka deng 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSVCONSOLETEXT message...