CVEvulnerability
CVE-2008-3116
10.0 HIGH
Official page ↗
- Status
- Modified
- Published
- 2008-07-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-134
Description
Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.
Affected configurations
• hanghai 5th street
• hanghai high street 5
• hanghai hot step
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://securityreason.com/securityalert/3982 securityreason.com
- http://www.securityfocus.com/archive/1/493649/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29928 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43370 exchange.xforce.ibmcloud.com
- http://securityreason.com/securityalert/3982 securityreason.com
- http://www.securityfocus.com/archive/1/493649/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/29928 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43370 exchange.xforce.ibmcloud.com