Description
Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console.
References
- http://aluigi.altervista.org/adv/csdoombof-adv.txt
- ADV-2006-1105 vdb-entry
- 19389 third-party-advisory
- 17248 vdb-entry
- http://voxelsoft.com/csdoom/
- csdoom-printf-format-string(25450) vdb-entry