CVE-2009-2916

Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary…

published August 21, 2009

CVSS
—
EPSS
3%
Percentile
88.7
In the wild
Unconfirmed
What it is

⚠️ A sneaky format string vulnerability in Vietcong 2 could let attackers execute arbitrary code by simply playing with their nickname! 🎮 Think of it like a waiter taking an order without checking it against the menu — if the order is wrong, who knows what the chef might whip up! If exploited, an attacker could potentially run any code they wanted on your system, leading to unauthorized access or catastrophic system failures. It's like giving a stranger the keys to your house without knowing who they are!

Put simply

Think of it like a waiter taking an order without checking it against the menu — if the order is wrong, who knows what the chef might whip up! The vulnerability arises in the CNS_AddTxt function within logs.dll, which allows attackers to inject format string specifiers through their nickname, compromising the game's security.

What to do

If exploited, an attacker could potentially run any code they wanted on your system, leading to unauthorized access or catastrophic system failures. It's like giving a stranger the keys to your house without knowing who they are! To safeguard against this, patch to version 1.11 or later, where this vulnerability is addressed. Review and sanitize all input fields to prevent similar vulnerabilities elsewhere. 🛡️ You've got this! Stay proactive and your gaming experience will be secure in no time! 💪✨

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03372 · 88.7th percentile
Published
2009-08-21T10:00Z
EPSS history
Timeline
  • 21 AUG 10:00Z
    Format string vulnerability in the CNS_AddTxt function in logs.dll in 2K Games Vietcong 2 1.10 and earlier might allow remote attackers to execute arbitrary…
    cvelistv5