peter bassill · operator
$ cve CVE-2006-1101 JSON

CVE-2006-1101 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 5.1% (pctl 92)

Patch early

A public exploit exists.

Description

The (1) sgetstr and (2) getint functions in Sauerbraten 2006_02_28, as derived from the Cube engine, allow remote attackers to cause a denial of service (segmentation fault) via long streams of input data that trigger an out-of-bounds read, as demonstrated using SV_EXT tag data in the Cube engine, which is not properly handled by getint.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:N/I:N/A:P
EPSS5.11% — more likely to be exploited than 92% of all CVEs
On CISA KEVno
Public exploityes
Published2006-03-09
Last modified2026-06-16

Affected (2)

VendorProduct
sauerbratencube
sauerbratensauerbraten

Public exploits

SourceTitleDate
exploit-dbSauerbraten 2006_02_28 - Multiple Buffer Overflow / Crash2006-03-06
exploit-dbCube 2005_08_29 - Multiple Buffer Overflow / Crash2006-03-06

References

→ the Explorer  ·  watch your stack  ·  NVD