CVE-2005-4846

2007-06-2022:00:00

mitre

www.cve.org

logger.cc

spey 0.3.3

format string vulnerability

denial of service

execute arbitrary code

syslog call

AI Score

7.6

Confidence

High

EPSS

0.002

Percentile

62.0%

JSON

Format string vulnerability in Logger.cc for Spey 0.3.3 allows attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in a syslog call.

References

sourceforge.net/forum/forum.php?forum_id=514029

spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?r1=1.5&r2=1.6

spey.cvs.sourceforge.net/spey/spey/src/Logger.cc?view=log

www.osvdb.org/21327