Description
Buffer overflow in the sgetstr function in shared/cube.h in Sauerbraten 2006_02_28 and earlier, as derived from the Cube engine, allows remote attackers to execute arbitrary code via long streams of input data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25083 ↗
- http://www.securityfocus.com/archive/1/426867/100/0/threaded ↗
- http://secunia.com/advisories/19199 ↗
- http://www.securityfocus.com/bid/16986 ↗
- http://www.securityfocus.com/archive/1/426865/100/0/threaded ↗
- http://secunia.com/advisories/19110 ↗
- http://www.vupen.com/english/advisories/2006/0847 ↗
- http://aluigi.altervista.org/adv/evilcube-adv.txt ↗
- http://cvs.sourceforge.net/viewcvs.py/sauerbraten/sauerbraten/src/shared/cube.h?r1=1.7&r2=1.8 ↗
- http://secunia.com/advisories/19111 ↗
- http://www.gentoo.org/security/en/glsa/glsa-200603-10.xml ↗
- http://www.vupen.com/english/advisories/2006/0848 ↗