CVE-2006-1236
NoneCVSS
—
EPSS
28.0%
Published
Mar 15, 2006
CISA due date
—
The record
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:10 | crossfire | 0 | 1.9.0-2 |
| Debian:11 | crossfire | 0 | 1.9.0-2 |
| Debian:12 | crossfire | 0 | 1.9.0-2 |
| Debian:13 | crossfire | 0 | 1.9.0-2 |
| Debian:3.0 | crossfire | 0 | 1.1.0-1woody2 |
| Debian:3.1 | crossfire | 0 | 1.6.0.dfsg.1-4sarge2 |