| ||
The most strongly affected language is C/C++. A successful attack can lead immediately to the execution of arbitrary code, and to information disclosure. Other languages wont typically allow the execution of arbitrary code, but other types of attacks are possible as we previously note. Perl isnt directly vulnerable to specifiers being given by user input, but it could be vulnerable if the format strings are read in from tampered data.