Buffer Overflow Vulnerability in Freeciv by Freeciv Development Team
CVE-2006-3913

Currently unrated

Key Information:

Vendor

Freeciv

Status
Freeciv
Vendor
CVE Published:
28 July 2006

What is CVE-2006-3913?

The vulnerability in Freeciv versions 2.1.0-beta1 and earlier, including SVN versions from before July 15, 2006, arises from a buffer overflow condition. Remote attackers can exploit this vulnerability by sending specially crafted packets, specifically targeting a PACKET_PLAYER_ATTRIBUTE_CHUNK. This can involve the use of a negative chunk_length or an excessively large chunk->offset value in the generic_handle_player_attribute_chunk function, as well as a large packet->length value in the handle_unit_orders function. Successful exploitation can lead to a denial of service, causing application crashes, and potentially allow attackers to execute arbitrary code on the vulnerable system.

References

http://www.vupen.com/english/advisories/2006/2942
vdb-entryx_refsource_VUPEN
http://aluigi.altervista.org/adv/freecivx-adv.txt
x_refsource_MISC
http://secunia.com/advisories/21254
third-party-advisoryx_refsource_SECUNIA

EPSS Score

5% chance of being exploited in the next 30 days.

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.