{"id":"CVE-2008-3116","aliases":["EUVD-2008-3106","GHSA-qf5r-6wjw-cj95"],"status":"published","title":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company)...","description":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.","severity":{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.05553,"percentile":0.92899,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-134"],"published":"2008-07-10T17:00:00Z","modified":"2026-06-16T22:55:09Z","exploits":[{"source":"exploitdb","id":"EDB-31964","title":"5th street - 'dx8render.dll' Format String","type":"dos","platform":"windows","date":"2008-06-25","verified":true,"url":"https://www.exploit-db.com/exploits/31964"}],"products":[{"vendor":"hanghai","product":"5th_street"},{"vendor":"hanghai","product":"high_street_5"},{"vendor":"hanghai","product":"hot_step"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/43370","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/493649/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://securityreason.com/securityalert/3982","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"http://www.securityfocus.com/bid/29928","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2008-3116"},{"url":"https://github.com/advisories/GHSA-qf5r-6wjw-cj95"}],"sources":{"cve":[{"id":"CVE-2008-3116","description":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.","status":"published","published":"2008-07-10T17:00:00Z","modified":"2024-08-07T09:28:40.991Z","updated_at":"2026-11-02T14:34:45.504702Z"}],"euvd":[{"id":"EUVD-2008-3106","description":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.","status":"published","published":"2008-07-10T17:00:00Z","modified":"2024-08-07T09:28:40Z","updated_at":"2026-11-03T01:38:53.704905Z"}],"ghsa":[{"id":"GHSA-qf5r-6wjw-cj95","title":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company)...","description":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.","status":"published","published":"2022-05-01T23:56:44Z","modified":"2023-01-31T05:06:00Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:48:57.180992Z"}],"nvd":[{"id":"CVE-2008-3116","description":"Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.","status":"published","published":"2008-07-10T17:41:00Z","modified":"2026-06-16T22:55:09.06Z","cvss":[{"version":"2.0","score":10,"vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:01:27.025121Z"}]}}