{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2008-06-25T00:00:00", "descriptions": [{"lang": "en", "value": "Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-11T19:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "5thstreet-dx8render-format-string(43370)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43370"}, {"name": "20080625 [BMSA 2008-07] Format string vulnerability in 5th street", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/493649/100/0/threaded"}, {"name": "3982", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3982"}, {"name": "29928", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/29928"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2008-3116", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "5thstreet-dx8render-format-string(43370)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43370"}, {"name": "20080625 [BMSA 2008-07] Format string vulnerability in 5th street", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/493649/100/0/threaded"}, {"name": "3982", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3982"}, {"name": "29928", "refsource": "BID", "url": "http://www.securityfocus.com/bid/29928"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T09:28:40.991Z"}, "title": "CVE Program Container", "references": [{"name": "5thstreet-dx8render-format-string(43370)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43370"}, {"name": "20080625 [BMSA 2008-07] Format string vulnerability in 5th street", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/493649/100/0/threaded"}, {"name": "3982", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3982"}, {"name": "29928", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/29928"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2008-3116", "datePublished": "2008-07-10T17:00:00", "dateReserved": "2008-07-10T00:00:00", "dateUpdated": "2024-08-07T09:28:40.991Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:hanghai:5th_street:*:*:*:*:*:*:*:*", "matchCriteriaId": "5AB46B0E-9E22-415D-8A9D-8371A9410B79", "vulnerable": true}, {"criteria": "cpe:2.3:a:hanghai:high_street_5:*:*:*:*:*:*:*:*", "matchCriteriaId": "480E2ABF-E794-4500-9EFC-111E09E5AEC7", "vulnerable": true}, {"criteria": "cpe:2.3:a:hanghai:hot_step:*:*:*:*:*:*:*:*", "matchCriteriaId": "CDB88C39-3A20-4A9E-863C-EBA4F9661DA4", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message."}, {"lang": "es", "value": "Vulnerabilidad de formato de cadena en dx8render.dll de Snail Game (tambi\u00e9n conocido como Suzhou Snail Electronic Company) 5th street (tambi\u00e9n conocido como Hot Step or High Street 5), permite a atacantes remotos ejecutar c\u00f3digo arbitrariamente a trav\u00e9s de especificadores de formato de cadena en un mensaje chat."}], "id": "CVE-2008-3116", "lastModified": "2018-10-11T20:46:59.503", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 10.0, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:L/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 10.0, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2008-07-10T17:41:00.000", "references": [{"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3982"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/493649/100/0/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/29928"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/43370"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-134"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}