CVE-2006-1618

None

CVSS

—

EPSS

13.5%

Published

Apr 5, 2006

CISA due date

—

The record

Format string vulnerability in the (1) Con_message and (2) conPrintf functions in con_main.c in Doomsday engine 1.8.6 allows remote attackers to execute arbitrary code via format string specifiers in an argument to the JOIN command, and possibly other command arguments.

Affected packages

Ecosystem	Package	Introduced	Fixed