NVD

Id
61232  
Name
CVE-2006-2537  
Description
Multiple format string vulnerabilities in (a) OpenBOR 2.0046 and earlier, (b) Beats of Rage (BOR) 1.0029 and earlier, and (c) Horizontal Shooter BOR (HOR) 2.0000 and earlier allow remote attackers to execute code via format string specifiers in configurations used in various mod files, as demonstrated by the (1) music identifier in data/scenes/intro.txt, which is not properly handled in the update function, and (2) background identifier in data/easy/1aeasy.txt, which is not properly handled in the shutdown function.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2016-12-20  
Published
2006-05-22  
Modified Date
2011-03-07  
Seq
2006-2537  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
316466 61232 CVE-2006-2537 http://aluigi.altervista.org/adv/borfs-adv.txt  View
316467 61232 CVE-2006-2537 18088  View
316468 61232 CVE-2006-2537 ADV-2006-1901  View
316469 61232 CVE-2006-2537 ADV-2006-1902  View
316470 61232 CVE-2006-2537 ADV-2006-1903  View
316471 61232 CVE-2006-2537 bor-mod-file-format-string(26582)  View

Related JVN