CVE-2005-0369 Integer overflow in n/a
Remote attackers can crash the Armagetron game client by sending packets with oversized descriptor or claim IDs, causing an array boundary violation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0369?
CVE-2005-0369 is a medium-severity vulnerability in n/a, published on 11 Feb 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Armagetron 0.2.6.0 and earlier and Armagetron Advanced 0.2.7.0 earlier allows remote attackers to cause a denial of service (application crash) via a packet with a large (1) descriptor ID or (2) claim_id, which exceeds the boundaries of an array.
Weakness: CWE-129
Which versions are affected by CVE-2005-0369?
It affects 2 products.
Products include Armagetronad Armagetron, Armagetronad Armagetron Advanced.
How do I fix CVE-2005-0369?
No fix has been published for CVE-2005-0369 yet. Limit exposure of the affected software until one is available.
Is CVE-2005-0369 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-0369 exists.
Public exploit code: 1 Exploit-DB entry.
Sources
Also known as GHSA-h49m-hqr5-72m9.