Format string vulnerability in Warrior Kings: Battles 1.23 and earlier and Warrior Kings 1.3 and earlier allows remote attackers to execute arbitrary code via format string specifiers in a nickname.
http://www.securityfocus.com/bid/13711
http://securitytracker.com/id?1014041
http://securitytracker.com/id?1014040
http://secunia.com/advisories/15482