Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, and possibly other unspecified vectors.
| Software | From | Fixed in |
|---|---|---|
| scorched_3d / scorched_3d | 39.1 | 39.1.x |