CVE-2008-3116

Published: Jul 10, 2008Modified: Apr 23, 2026

10.0

Vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Exploitability: 10.0 / Impact: 10.0

Source: NVD

Description

Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.

Affected (3)

Products: Hanghai: 5th Street, High Street 5, Hot Step

3 products

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Hanghai 5th Street	All versions
Hanghai High Street 5	All versions
Hanghai Hot Step	All versions

Related CWEs

CWE-134

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (8)

http://securityreason.com/securityalert/3982

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/493649/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/29928

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/43370

Source: cve@mitre.org

http://securityreason.com/securityalert/3982

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/493649/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/29928

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/43370

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.