Description
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file.
References
- 16990 vdb-entry
- ADV-2006-0849 vdb-entry
- 549 third-party-advisory
- 20060306 Multiple vulnerabilities in Liero Xtreme 0.62b mailing-list
- 19079 third-party-advisory
- liero-visualization-format-string(25187) vdb-entry
- http://aluigi.altervista.org/adv/lieroxxx-adv.txt