CVE-2009-3637

Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute…

published January 13, 2010

CVSS
—
EPSS
8%
Percentile
94.6
In the wild
Unconfirmed
What it is

⚠️ An unexpected packet could be a game-changer! A stack-based buffer overflow in Alien Arena's M_AddToServerList function could let attackers execute arbitrary code. 🎮 Think of it like a waiter delivering a huge, unverified order to the kitchen — if the chefs aren’t careful, they could whip up a dish that nobody asked for! If exploited, this vulnerability could allow a remote attacker to run any code they want on the server, potentially taking over control and causing chaos in the game. While there's no immediate known exploitation, the potential for mischief is definitely there!

Put simply

Think of it like a waiter delivering a huge, unverified order to the kitchen — if the chefs aren’t careful, they could whip up a dish that nobody asked for! This vulnerability arises from a buffer overflow in the M_AddToServerList function, which could be triggered by sending a specially crafted packet with a long print command to UDP port 27901. This flaw allows attackers to manipulate memory in a way that could lead to arbitrary code execution.

What to do

If exploited, this vulnerability could allow a remote attacker to run any code they want on the server, potentially taking over control and causing chaos in the game. While there's no immediate known exploitation, the potential for mischief is definitely there! To mitigate this risk, it's important to patch Alien Arena to the latest version if available. Additionally, consider implementing network-level protections such as firewalls to restrict access to vulnerable ports. You've got this! Take these steps to secure your game environment and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.07641 · 94.6th percentile
Published
2010-01-13T11:00Z
EPSS history
Timeline
  • 13 JAN 11:00Z
    Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute…
    cvelistv5