Description
Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname.
References
- 14664 vdb-entry
- 20050825 Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln? mailing-list
- 16585 third-party-advisory
- quake-nickname-format-string(22013) vdb-entry