FieldySnuts has discovered a vulnerability in Scorched 3D, which potentially can be exploited by malicious people to compromise a vulnerable server.

The vulnerability is caused due to a format string error within a routine for displaying text entered in a chat box. This can be exploited by malicious users to crash the server and potentially execute arbitrary code by including format specifiers in the text.

The vulnerability reportedly affects build 36.2 and prior.

Solution
The vulnerability has reportedly been fixed in build 37 and later.
Further details available to Secunia VIM customers

Provided and/or discovered by
FieldySnuts

Original Advisory
http://bugs.gentoo.org/show_bug.cgi?id=39302

Deep Links
Links available to Secunia VIM customers