CVE-2008-3116

Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.

CVSS v2.0 10.0 HIGH

10.0^/10

CVSS v2.0 : HIGH

V2 Legend

Vector : AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability : 10.0 / Impact : 10.0

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact COMPLETE

Integrity Impact COMPLETE

Availability Impact COMPLETE

References

Link	Resource
http://www.securityfocus.com/bid/29928
http://securityreason.com/securityalert/3982
https://exchange.xforce.ibmcloud.com/vulnerabilities/43370
http://www.securityfocus.com/archive/1/493649/100/0/threaded

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:hanghai:high_street_5::::::::
	cpe:2.3:a:hanghai:hot_step::::::::
	cpe:2.3:a:hanghai:5th_street::::::::

Information

Published : 2008-07-10 10:41

Updated : 2018-10-11 13:46

NVD link : CVE-2008-3116

Mitre link : CVE-2008-3116

JSON object : View

CWE

CWE-134

Use of Externally-Controlled Format String

Products Affected

hanghai

5th_street
hot_step
high_street_5

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/bid/29928", "name": "29928", "tags": [], "refsource": "BID"}, {"url": "http://securityreason.com/securityalert/3982", "name": "3982", "tags": [], "refsource": "SREASON"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43370", "name": "5thstreet-dx8render-format-string(43370)", "tags": [], "refsource": "XF"}, {"url": "http://www.securityfocus.com/archive/1/493649/100/0/threaded", "name": "20080625 [BMSA 2008-07] Format string vulnerability in 5th street", "tags": [], "refsource": "BUGTRAQ"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "CWE-134"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-2008-3116", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 10.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "authentication": "NONE", "integrityImpact": "COMPLETE", "accessComplexity": "LOW", "availabilityImpact": "COMPLETE", "confidentialityImpact": "COMPLETE"}, "severity": "HIGH", "impactScore": 10.0, "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}}, "publishedDate": "2008-07-10T17:41Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:hanghai:high_street_5:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hanghai:hot_step:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:hanghai:5th_street:*:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2018-10-11T20:46Z"}

10.0 /10