5

CVE-2006-6664

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp.  NOTE: some details were obtained from third party information.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Marathon Aleph OneMarathon Aleph One Version <= 2006-12-02
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.63% 0.835
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://marathon.sourceforge.net/release-notes/20061202.html
http://secunia.com/advisories/23380
http://sourceforge.net/project/shownotes.php?release_id=471964
http://sourceforge.net/project/shownotes.php?release_id=471971
http://www.vupen.com/english/advisories/2006/5064