CVE-2006-3913: Buffer Overflow
Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunklength or a (2) large chunk->offset value in a PACKETPLAYERATTRIBUTECHUNK packet in the generichandleplayerattributechunk function in common/packets.c, and (3) a large packet->length value in the handleunitorders function in server/unithand.c.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2006-3913?
CVE-2006-3913 is classified as a high severity vulnerability due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2006-3913?
To fix CVE-2006-3913, it is recommended to update Freeciv to version 2.1.0-beta2 or later, which addresses this buffer overflow issue.
What kind of attacks are possible with CVE-2006-3913?
CVE-2006-3913 enables remote attackers to launch denial of service attacks and potentially execute arbitrary code on affected systems.
Which versions of Freeciv are affected by CVE-2006-3913?
CVE-2006-3913 affects Freeciv versions 2.1.0-beta1 and earlier.
Is CVE-2006-3913 a requirement for all Freeciv users?
Yes, all Freeciv users running affected versions should prioritize patching against CVE-2006-3913 to enhance security.