Description
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- https://security.gentoo.org/glsa/201705-13 ↗
- https://www.teeworlds.com/?page=news&id=12086 ↗
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/C4JNSBXXPE7O32ZMFK7D7YL6EKLG7PRV/ ↗
- http://www.securityfocus.com/bid/94381 ↗
- http://www.openwall.com/lists/oss-security/2016/11/16/8 ↗
- http://www.openwall.com/lists/oss-security/2016/11/17/8 ↗
- https://github.com/teeworlds/teeworlds/commit/ff254722a2683867fcb3e67569ffd36226c4bc62 ↗