CVEs-PoC/2006/CVE-2006-1075.md

CVE-2006-1075

Description

Format string vulnerability in the visualization function in Jason Boettcher Liero Xtreme 0.62b and earlier allows remote attackers to execute arbitrary code via format string specifiers in (1) a nickname, (2) a dedicated server name, or (3) a mapname in a level (aka .lxl) file.

POC

Reference

• http://aluigi.altervista.org/adv/lieroxxx-adv.txt
• http://aluigi.altervista.org/adv/lieroxxx-adv.txt
• http://securityreason.com/securityalert/549
• http://securityreason.com/securityalert/549

Github

No PoCs found on GitHub currently.