Format string
Format string vulnerability in the ClGetPackets function in clmain.c in the client in Doomsday aka deng 1.9.0-beta5.1 and earlier allows remote Doomsday servers to execute arbitrary code via format string specifiers in a PSVCONSOLETEXT message...