seen here:

http://www.securitytracker.com/alerts/2004/Jul/1010728.html
("http://www.securitytracker.com/alerts/2004/Jul/1010728.html
")

topic:

OllyDbg Format String Flaw in OutputDebugString() Lets Remote Users Execute Arbitrary Code .

Haven't tested it myself but it seems to be true.

Olly should correct this security hole, even if it's little. Now it has been revealed...

Neitsa.

"OllyDbg Format String Flaw in OutputDebugString() Lets Remote Users Execute Arbitrary Code ."

yes and a executed exe , too!