A vulnerability has been identified in Sparklet, which could be exploited by remote attackers to take complete control of an affected system. This flaw is due to a format string error in the "WriteText()" and "allegro_gl_printf_ex()" functions when handling user-supplied input (e.g. nickname), which could be exploited by remote attackers to crash or compromise a vulnerable client via a malicious nickname.

Affected Products

Sparklet version 0.9.4try3 and prior

Solution

Upgrade to version 0.9.5 :
http://sourceforge.net/project/showfiles.php?group_id=130578

References

http://www.vupen.com/english/advisories/2006/2695
http://www.vupen.com/english/reference/15277

Credits

Vulnerability reported by Luigi Auriemma

Changelog

2006-07-06 : Initial release
2006-08-12 : Updated Solution

Feedback

If you have additional information or corrections for this security advisory please submit them via our contact form.