What’s Vulnerable › Vulnerabilities

CVE-2008-3116

• Severity: critical (CVSS 10.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 5.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2008-07-10 · updated 2026-06-16
• Weakness: CWE-134

Description

Format string vulnerability in dx8render.dll in Snail Game (aka Suzhou Snail Electronic Company) 5th street (aka Hot Step or High Street 5) allows remote attackers to execute arbitrary code via format string specifiers in a chat message.

Affected products

• Hanghai 5Th Street: all versions
• Hanghai High Street 5: all versions
• Hanghai Hot Step: all versions

References

• http://securityreason.com/securityalert/3982
• http://www.securityfocus.com/archive/1/493649/100/0/threaded
• http://www.securityfocus.com/bid/29928
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43370
• http://securityreason.com/securityalert/3982
• http://www.securityfocus.com/archive/1/493649/100/0/threaded
• http://www.securityfocus.com/bid/29928
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43370

Get alerted when CVE-2008-3116 or the next vulnerability affects your stack