CVE-2006-6664: Marathon Aleph One

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Format string vulnerability in Marathon Aleph One before 0.17.1 and 2006-12-17 might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via format string specifiers in the TopLevelLogger::logMessageV function in Misc/Logging.cpp. NOTE: some details were obtained from third party information.

Affected products

• Marathon Aleph One Marathon Aleph One: up to and including 0.17; up to and including 2006-12-02

Published 2006-12-20. Last modified 2026-06-16.