CVE-2006-1194

Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in…

published March 13, 2006

CVSS
—
EPSS
4%
Percentile
91.3
In the wild
Unconfirmed
What it is

Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet with a large command length value, which leads to an invalid memory access.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04420 · 91.3th percentile
Published
2006-03-13T22:00Z
EPSS history
Timeline
  • 13 MAR 22:00Z
    Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in…
    cvelistv5