Improper input validation in White Dune

CVE-2008-0101

Format string vulnerability in the swDebugf function in DuneApp.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a .WRL file.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.037 (88.6th percentile) — read the EPSS interpretation.

Affected products

Weakness classification (CWE)

References