[] NeoSense

5th street - 'dx8render.dll' Format String

Author: superkhung
type: dos
platform: windows
port: 
date_added: 2008-06-25 
date_updated: 2014-02-28 
verified: 1 
codes: CVE-2008-3116;OSVDB-47847 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/29928/info

The '5th street' game is prone to a format-string vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code with the privileges of a user running the application. Failed attacks will likely cause denial-of-service conditions.

When the following chat message is sent, the game client of every connected user will crash:

%5000000.x