CVE-2006-3913 - Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c

Back Back to CVE browser

HIGH

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c

Published Jul 28, 2006

7.5

HIGH

CVSS 2.0

EPSS 5.72%

Description

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (12)

http://aluigi.altervista.org/adv/freecivx-adv.txt
x_refsource_MISCExploit
http://secunia.com/advisories/21171
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21254
third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/21352
third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1296
third-party-advisoryx_refsource_SREASON
http://www.debian.org/security/2006/dsa-1142
vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDKSA-2006:135
vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/441042/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19117
vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/2942
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27955
vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/27956
vdb-entryx_refsource_XF

Link	Providers	Tags
http://aluigi.altervista.org/adv/freecivx-adv.txt		x_refsource_MISCExploit
http://secunia.com/advisories/21171		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://secunia.com/advisories/21254		third-party-advisoryx_refsource_SECUNIAPatchVendor Advisory
http://secunia.com/advisories/21352		third-party-advisoryx_refsource_SECUNIA
http://securityreason.com/securityalert/1296		third-party-advisoryx_refsource_SREASON
http://www.debian.org/security/2006/dsa-1142		vendor-advisoryx_refsource_DEBIAN
http://www.mandriva.com/security/advisories?name=MDKSA-2006:135		vendor-advisoryx_refsource_MANDRIVA
http://www.securityfocus.com/archive/1/441042/100/0/threaded		mailing-listx_refsource_BUGTRAQ
http://www.securityfocus.com/bid/19117		vdb-entryx_refsource_BIDExploit
http://www.vupen.com/english/advisories/2006/2942		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/27955		vdb-entryx_refsource_XF
https://exchange.xforce.ibmcloud.com/vulnerabilities/27956		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jul 28, 2006

Updated Aug 7, 2024

Reserved Jul 27, 2006

Link CVE-2006-3913

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2006-3913

Red Hat

Severity n/a

Public date n/a

Links CVE-2006-3913