5
CVE-2006-6664
- EPSS 2.63%
- Veröffentlicht 20.12.2006 23:28:00
- Zuletzt bearbeitet 16.06.2026 22:33:33
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details were obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Marathon Aleph One ≫ Marathon Aleph One Version <= 0.17
Marathon Aleph One ≫ Marathon Aleph One Version <= 2006-12-02
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 2.63% | 0.835 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 5 | 10 | 2.9 |
AV:N/AC:L/Au:N/C:N/I:N/A:P
|
http://marathon.sourceforge.net/release-notes/20061202.html
http://secunia.com/advisories/23380
http://sourceforge.net/project/shownotes.php?release_id=471964
http://sourceforge.net/project/shownotes.php?release_id=471971
http://www.vupen.com/english/advisories/2006/5064