CVE:CVE-2005-2639
CNNVD:CNNVD-200508-225
Chris Moneymaker's World Poker Championship是Valusoft开发并发布的扑克游戏。
Chris Moneymaker's World Poker Championship在处理用户请求时存在格式串处理漏洞，远程攻击者可以利用这个漏洞执行任意指令或导致拒绝服务。使用sprintf()创建"%s has joined the game."(这里%s是客户端所传送的昵称)字符串时存在缓冲区溢出漏洞。
solution:Upgrade valusoft chris_moneymakers_world_poker_championship to a higher version than 1.0,and avoid the version 1.0