diff -up freewrl-1.22.13/src/lib/main/ConsoleMessage.c.format-security freewrl-1.22.13/src/lib/main/ConsoleMessage.c
--- freewrl-1.22.13/src/lib/main/ConsoleMessage.c.format-security	2013-12-03 10:31:01.132222031 -0500
+++ freewrl-1.22.13/src/lib/main/ConsoleMessage.c	2013-12-03 10:33:18.232054080 -0500
@@ -327,7 +327,7 @@ int fwvsnprintf(char *buffer,int buffer_
 
 		if (j) {
 			format[j] = '\0';
-			count += sprintf(tempbuf, format);/* printf it verbatim				*/
+			count += sprintf(tempbuf, "%s", format);/* printf it verbatim				*/
 			fmt += j;
 		} else {
 			for (j = 0; !isalpha(fmt[j]); j++) {	 /* find end of format specifier */