Unscored severity · published Mar 9, 2006
CVE-2006-1075
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string…
–
CVSS
3.8%
EPSS
No
On KEV
Description
Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.8% · higher than 90% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LX
Liero Xtreme · Jason Boettcher
0.56b_pack_1.7; 0.62b · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-1075
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-1075
Exploit
http://aluigi.altervista.org/adv/lieroxxx-adv.txt
secunia.com
http://secunia.com/advisories/19079
securityreason.com
http://securityreason.com/securityalert/549
www.securityfocus.com
http://www.securityfocus.com/archive/1/426864/100/0/threaded
www.securityfocus.com
http://www.securityfocus.com/bid/16990
www.vupen.com
http://www.vupen.com/english/advisories/2006/0849
More from Liero Xtreme
–
CVE-2006-1074
Jason Boettcher Liero Xtreme 0.62b and earlier allow remote attackers to cause a denial of service (application crash or hang) via a long argument to the connect command