CVE:CVE-2008-3116
CNNVD:CNNVD-200807-173
舞街区是由游戏蜗牛推出的大型网络视频舞厅。
舞街区的dx8render.dll模块中存在格式串漏洞，在气球中渲染对话消息之前，该消息被用作了vsnwprintf函数的格式串参数，这允许远程攻击者通过发送包含有%5000000.x的对话消息导致执行任意指令。
solution:Upgrade hanghai 5th_street to a higher version than *; Upgrade hanghai high_street_5 to a higher version than *; Upgrade hanghai hot_step to a higher version than *