Gentoo: GLSA-200604-05 High: Doomsday Format String Risk Threat

Gentoo Linux Security Advisory GLSA 200604-05 https://security.gentoo.org/ Severity: High Title: Doomsday: Format string vulnerability Date: April 06, 2006 Bugs: #128690 ID: 200604-05

Synopsis ======= Format string vulnerabilities in Doomsday may lead to the execution of arbitrary code.
Background ========= Doomsday is a modern gaming engine for popular ID games like Doom, Heretic and Hexen.
Affected packages ================ ------------------------------------------------------------------- Package / Vulnerable / Unaffected ------------------------------------------------------------------- 1 games-fps/doomsday <= 1.8.6-r1 Vulnerable! ------------------------------------------------------------------- NOTE: Certain packages are still vulnerable. Users should migrate to another package if one is available or wait for the existing packages to be marked stable by their architecture maintainers.
========== Luigi Auriemma discovered that Doomsday incorrectly implements formatted printing.
Impact ===== A remote attacker could exploit these vulnerabilities to execute arbitrary code with the rights of the user running the...