Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

UFO2000 can crash when receiving malformed data

CVE-2006-3790 · published 20 years ago
Summary

The UFO2000 game (revision 1057) can be forced to stop running if it receives network packets that contain incorrect size information. An attacker could send such specially crafted packets, causing the program to read beyond its limits and shut down. Update to the latest version or apply the provided patch to validate packet sizes before processing.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
ufo2000 ufo2000 <= svn_1057
cpe:2.3:a:ufo2000:ufo2000:*:*:*:*:*:*:*:*
Original advisory text
The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent wi...
The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
2% chance of attack within 30 days
Timeline
Published24 Jul 2006
Updated29 Oct 2026
First seen29 Sep 2026
Sources
CVE-2006-3790 · NVD
Track software like this
Free during beta