National Institute of Standards and Technology
Package illustrating a test case

Test case 149061

Description

A syslog is called with a user supplied format string. An attempt was made to preformat the buffer but the vulnerability remains.

Flaws

Have any comments on this test case? Please, send us an email.