CVE-2006-3125 Integer overflow in n/a
Remote attackers can execute arbitrary code on gtetrinet clients by sending a packet with a negative player count, exploiting an array index error.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2006-3125?
CVE-2006-3125 is a high-severity vulnerability in n/a, published on 31 Aug 2006. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Array index error in tetrinet.c in gtetrinet 0.7.8 and earlier allows remote attackers to execute arbitrary code via a packet specifying a negative number of players, which is used as an array index.
Which versions are affected by CVE-2006-3125?
It affects 1 product.
Products include Gtetrinet Gtetrinet.
How do I fix CVE-2006-3125?
Upgrade to a fixed version.
Is CVE-2006-3125 being exploited?
There is no known exploitation of CVE-2006-3125 in the wild and no public exploit code.
Sources
Also known as DEBIAN-CVE-2006-3125, DSA-1163, GHSA-958g-54vf-p8h2.