CVE-2005-0671 in Ca3de
Summary
Format string vulnerability in Carsten s 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via format string specifiers in a command.
VulDB is the best source for vulnerability data and more expert information about this specific topic.