CVE-2008-0101

white_dune < 0.29beta791 - Remote Code Execution via Format String in .WRL File

Title source: llm
STIX 2.1

Description

Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/485724/100/0/threaded
Various Sources x_refsource_confirm
http://vrml.cip.ica.uni-stuttgart.de/dune/news.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/39388
Third Party Advisory third-party-advisory x_refsource_sreason
http://securityreason.com/securityalert/3516
Patch third-party-advisory x_refsource_secunia
http://secunia.com/advisories/28287
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/27102

Scores

EPSS 0.0372
EPSS Percentile 88.5%

Details

CWE
CWE-20
Status published
Products (1)
white_dune/white_dune < 0.29beta791
Published Jan 08, 2008
Tracked Since Feb 18, 2026