CVE-2006-1236: Buffer Overflow

Published Mar 15, 2006

Updated

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.

Affected Software

1 affected component

CrossFire CrossFire=1.9.0

Event History

Mar 15, 2006

CVE Published

12:02 AM

CVE Published

via MITRE·05:00 AM

Data Sourced

via MITRE·05:00 AM

Description

Frequently Asked Questions

Who can exploit this issue?

A remote attacker can exploit it over the network without authentication. The attack involves sending a long setup sound command to the affected server.

What is the potential impact of successful exploitation?

Successful exploitation may allow arbitrary code execution. The reported impact includes compromise of confidentiality, integrity, and availability.

Is this the same issue as CVE-2006-1010?

No. The available vulnerability information explicitly identifies this as a different vulnerability from CVE-2006-1010.

CVE-2006-1236: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact of successful exploitation?

Is this the same issue as CVE-2006-1010?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What is the potential impact of successful exploitation?

Is this the same issue as CVE-2006-1010?