Format string vulnerability in Hashcash 1.16 allows remote attackers to cause a denial of service (memory consumption) and possibly execute arbitrary code via format string specifiers in a reply address, which is not properly handled when printing the header.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Hashcash | Hashcash | 1.14 (including) | 1.14 (including) |
| Hashcash | Hashcash | 1.15 (including) | 1.15 (including) |
| Hashcash | Hashcash | 1.16 (including) | 1.16 (including) |