CVEvulnerability

CVE-2006-2409

4.6 MEDIUM Published 2006-05-16 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-05-16
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-134

Description

Format string vulnerability in the raydium_log function in console.c in Raydium before SVN revision 310 allows local users to execute arbitrary code via format string specifiers in the format parameter, which are not properly handled in a call to raydium_console_line_add.

Affected configurations

• raydium raydium svn revision 283 • raydium raydium svn revision 284 • raydium raydium svn revision 285 • raydium raydium svn revision 286 • raydium raydium svn revision 287 • raydium raydium svn revision 288 • raydium raydium svn revision 289 • raydium raydium svn revision 290 • raydium raydium svn revision 291 • raydium raydium svn revision 292 • raydium raydium svn revision 293 • raydium raydium svn revision 294 • raydium raydium svn revision 295 • raydium raydium svn revision 296 • raydium raydium svn revision 297 • raydium raydium svn revision 298 • raydium raydium svn revision 299 • raydium raydium svn revision 300 • raydium raydium svn revision 301 • raydium raydium svn revision 302 • raydium raydium svn revision 303 • raydium raydium svn revision 304 • raydium raydium svn revision 305 • raydium raydium svn revision 306 • raydium raydium svn revision 307 • raydium raydium svn revision 308 • raydium raydium svn revision 309

Related

Weakness · CWE (1)

  • CWE-134 Use of Externally-Controlled Format String weakness

References