- Description
- Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.
- Source
- cve@mitre.org
- NVD status
- Modified
CVSS 2.0
- Type
- Primary
- Base score
- 10
- Impact score
- 10
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:C/I:C/A:C
- nvd@nist.gov
- CWE-134
- Hype score
- Not currently trending
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:hanghai:5th_street:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "5AB46B0E-9E22-415D-8A9D-8371A9410B79"
},
{
"criteria": "cpe:2.3:a:hanghai:high_street_5:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "480E2ABF-E794-4500-9EFC-111E09E5AEC7"
},
{
"criteria": "cpe:2.3:a:hanghai:hot_step:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "CDB88C39-3A20-4A9E-863C-EBA4F9661DA4"
}
],
"operator": "OR"
}
]
}
]