CVE-2008-0101
published 2008-01-08CVE-2008-0101: Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code…
PriorityP340high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
3.72%
88.4th percentile
Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | whitedune | < whitedune 0.28.13-1 (bookworm) | whitedune 0.28.13-1 (bookworm) |
| debian | whitedune | — | — |
| white_dune | white_dune | <= 0.29beta791 | — |
CVSS provenance
nvdv2.07.5HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P
osv7.5HIGH
vendor_debian7.5LOW
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Debian
CVE-2008-0101: whitedune - Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dun...
vendor_debian·2008·CVSS 7.5
CVE-2008-0101 [HIGH] CVE-2008-0101: whitedune - Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dun...
Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.
Scope: local
bookworm: resolved (fixed in 0.28.13-1)
bullseye: resolved (fixed in 0.28.13-1)
Debian
CVE-2008-7228: whitedune - Multiple format string vulnerabilities in White_Dune before 0.29beta851 have uns...
vendor_debian·2008·CVSS 7.5
CVE-2008-7228 [HIGH] CVE-2008-7228: whitedune - Multiple format string vulnerabilities in White_Dune before 0.29beta851 have uns...
Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.
Scope: local
bookworm: resolved
bullseye: resolved
GHSA
GHSA-3cg3-wjrx-v9jw: Multiple format string vulnerabilities in White_Dune before 0
ghsa_unreviewed·2022-05-17·CVSS 7.5
CVE-2008-7228 [HIGH] CWE-134 GHSA-3cg3-wjrx-v9jw: Multiple format string vulnerabilities in White_Dune before 0
Multiple format string vulnerabilities in White_Dune before 0.29beta851 have unspecified impact and attack vectors, a different vulnerability than CVE-2008-0101.
GHSA
GHSA-x587-4c7w-rhvq: Format string vulnerability in the swDebugf function in DuneApp
ghsa_unreviewed·2022-05-01
CVE-2008-0101 [HIGH] CWE-20 GHSA-x587-4c7w-rhvq: Format string vulnerability in the swDebugf function in DuneApp
Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.
OSV
CVE-2008-0101: Format string vulnerability in the swDebugf function in DuneApp
osv·2008-01-08·CVSS 7.5
CVE-2008-0101 [HIGH] CVE-2008-0101: Format string vulnerability in the swDebugf function in DuneApp
Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://aluigi.altervista.org/adv/whitedunboffs-adv.txthttp://secunia.com/advisories/28287http://securityreason.com/securityalert/3516http://vrml.cip.ica.uni-stuttgart.de/dune/news.htmlhttp://www.securityfocus.com/archive/1/485724/100/0/threadedhttp://www.securityfocus.com/bid/27102https://exchange.xforce.ibmcloud.com/vulnerabilities/39388http://aluigi.altervista.org/adv/whitedunboffs-adv.txthttp://secunia.com/advisories/28287http://securityreason.com/securityalert/3516http://vrml.cip.ica.uni-stuttgart.de/dune/news.htmlhttp://www.securityfocus.com/archive/1/485724/100/0/threadedhttp://www.securityfocus.com/bid/27102https://exchange.xforce.ibmcloud.com/vulnerabilities/39388
2008-01-08
Published