CVE-2008-3116 Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format...
HighCVSS 10.0
EPSS 5.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| hanghai 5th street | All versions | No fix listed |
| hanghai high street 5 | All versions | No fix listed |
| hanghai hot step | All versions | No fix listed |
References
- 3982 third-party-advisory
- 20080625 [BMSA 2008-07] Format string vulnerability in 5th street mailing-list
- 29928 vdb-entry
- 5thstreet-dx8render-format-string(43370) vdb-entry