CVE-2006-3913
- State
- Published
- Severity
- Not scored
- Published
- Jul 28, 2006
- Updated
- Aug 7, 2024
- Reserved
- Jul 27, 2006
Description
Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- ADV-2006-2942vdb-entry
- http://aluigi.altervista.org/adv/freecivx-adv.txt
- 21254third-party-advisory
- freeciv-packetsc-dos(27955)vdb-entry
- 21352third-party-advisory
- 20060723 Two crash vulnerabilities in Freeciv 2.1.0-beta1 (SVN 15 Jul 2006)mailing-list
- freeciv-unithand-dos(27956)vdb-entry
- 19117vdb-entry
- DSA-1142vendor-advisory
- MDKSA-2006:135vendor-advisory
- 1296third-party-advisory
- 21171third-party-advisory
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.