CVE-2006-1618

Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments.

CVSS v2.0 NVD

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

13.49% chance of exploitation in the next 30 days, 96th percentile

Published

2006-04-05

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27566

Security advisories

• http://aluigi.altervista.org/adv/doomsdayfs-adv.txt
• http://secunia.com/advisories/19515
• http://www.securityfocus.com/bid/17369

References

• CVE Record
• NVD entry