1. CVE-Search
  2. CVE-2006-3908
ID CVE-2006-3908
Summary Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.
References
Vulnerable Configurations
  • cpe:2.3:a:gillius_programming:game_networking_engine:*:*:*:*:*:*:*:*
    cpe:2.3:a:gillius_programming:game_networking_engine:*:*:*:*:*:*:*:*
  • cpe:2.3:a:gillius_programming:game_networking_engine:cvs_2006-07-23:*:*:*:*:*:*:*
    cpe:2.3:a:gillius_programming:game_networking_engine:cvs_2006-07-23:*:*:*:*:*:*:*
CVSS
Base: 7.5 (as of 20-07-2017 - 01:32)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL PARTIAL PARTIAL
cvss-vector via4 AV:N/AC:L/Au:N/C:P/I:P/A:P
refmap via4
bid 19154
confirm http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date
misc http://aluigi.altervista.org/adv/gnefs-adv.txt
vupen ADV-2006-2993
xf gne-gout-format-string(27959)
Last major update 20-07-2017 - 01:32
Published 27-07-2006 - 22:04
Last modified 20-07-2017 - 01:32
Back to Top