Sparklet Remote Format String Vulnerability

Bugtraq ID:	18862
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 06 2006 12:00AM
Updated:	Jul 06 2006 11:44PM
Credit:	Luigi Auriemma has been credited with the discovery of this vulnerability
Vulnerable:	Milan Mimica Sparklet 0.9.4
Not Vulnerable:

Sparklet Remote Format String Vulnerability

Sparklet is prone to a remote format-string vulnerability.

This is issue arises when the application displays a text string on the client screen during a match.

A successful exploit could result in executing arbitrary code or crashing the application.

Versions 0.9.4try3 and previous versions are vulnerable to this issue.

Sparklet Remote Format String Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Sparklet Remote Format String Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] mailto:[email protected]:[email protected].

Sparklet Remote Format String Vulnerability

References:

• Sparklet Advisory (Luigi Auriemma)
  
• Sparklet Home Page (Milan Mimica)