Format String Error

• Risk:

• Medium

• Type:
• Active

• CWE:
• CWE-134

Summary

A Format String error occurs when the submitted data of an input string is evaluated as a command by the application.

Solution

Rewrite the background program using proper deletion of bad character strings. This will require a recompile of the background executable.

Other info

Potential Format String Error. The script closed the connection on a /%s

References

https://owasp.org/www-community/attacks/Format_string_attack

Free online web security scanner