CVE-2006-3573 Other in n/a
Remote attackers can execute arbitrary code via format string specifiers in a player nickname in Sparklet media player.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2006-3573?
CVE-2006-3573 is a critical vulnerability in n/a, published on 13 Jul 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Format string vulnerability in the WriteText function in agl_text.cpp in Milan Mimica Sparklet 0.9.4 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a player nickname.
Weakness: CWE-134
Which versions are affected by CVE-2006-3573?
It affects 1 product.
Products include Milan Mimica Sparklet.
How do I fix CVE-2006-3573?
No fix has been published for CVE-2006-3573 yet. Limit exposure of the affected software until one is available.
Is CVE-2006-3573 being exploited?
There is no known exploitation of CVE-2006-3573 in the wild and no public exploit code.
Sources
Also known as GHSA-j2r3-mq93-52w3.