Description
Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
by Luigi Auriemma · textremotemultiple
https://www.exploit-db.com/exploits/25691
References (6)
Core 6
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/13711
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014040
Third Party Advisory x_refsource_misc
http://aluigi.altervista.org/adv/warkings-adv.txt
Third Party Advisory, VDB Entry vdb-entry
x_refsource_sectrack
http://securitytracker.com/id?1014041
Mailing List mailing-list
x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=111686776303832&w=2
Third Party Advisory third-party-advisory
x_refsource_secunia
http://secunia.com/advisories/15482
Scores
EPSS
0.1724
EPSS Percentile
95.1%
Details
Status
published
Products (2)
black_cactus/warrior_kings
< 1.3
black_cactus/warrior_kings_battles
< 1.23
Published
May 24, 2005
Tracked Since
Feb 18, 2026