CVE-2006-1101
Last modified
CVE-2006-1101 is a vulnerability of currently unknown severity. The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.. EPSS estimates a 4.99% chance of exploitation in the next 30 days.
Description
The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Sauerbraten | Cube | 2005-08-09 |
| Sauerbraten | Sauerbraten | 2006-02-28 |
References
- http://aluigi.altervista.org/adv/evilcube-adv.txtExploit, Vendor Advisory
- http://aluigi.altervista.org/adv/evilcube-adv.txtExploit, Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1101?
How severe is CVE-2006-1101?
How do I fix CVE-2006-1101?
Are you affected by CVE-2006-1101?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST