Description
Format string vulnerability in the PROJECT::write_account_file function in client/cs_account.cpp in BOINC, possibly 7.2.33, allows remote attackers to cause a denial of service (crash) or possibly execute arbitrary code via format string specifiers in the gui_urls item in an account file.
References (5)
Scores
EPSS
0.0269
EPSS Percentile
85.9%
Details
CWE
CWE-134
Status
published
Products (1)
universityofcalifornia/boinc_client
7.2.33
Published
Jun 02, 2014
Tracked Since
Feb 18, 2026