Weekly edition	Kernel	Security	Distributions	Contact Us	Search
Archives	Calendar	Subscribe	Write for LWN	LWN.net FAQ	Sponsors

crossfire: arbitrary code execution

Package(s):

crossfire

CVE #(s):

CVE-2006-1010

Created:

March 14, 2006

Updated:

April 24, 2006

Description:

It was discovered that Crossfire, a multiplayer adventure game, performs insufficient bounds checking on network packets when run in "oldsocketmode", which may possibly lead to the execution of arbitrary code.

Alerts:

Gentoo	200604-11	2006-04-22
Debian	DSA-1001-1	2006-03-14

(Log in to post comments)