CVE-2006-3120

CVE-2006-3120 describes a format string vulnerability in Brian Wotring Osiris versions prior to 4.2.1, specifically within its logging functions. This flaw allows remote attackers to trigger a denial of service through an application crash and potentially execute arbitrary code. With a CVSS score of 7.5, this vulnerability is considered highly severe, requiring no authentication and having low attack complexity, with potential impacts on confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage surrounding this CVE.