CVE-2006-1236

HIGH 7.5CVE-2006-1236 · Published 15/03/2006 · updated 16/06/2026

Package	Affected versions	Patched versions
crossfire crossfire	`= 1.9.0`	No fix yet

Description

Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.

References

cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c
packetstormsecurity.com/files/163873/Crossfire-Server-1.0-Buffer-Overflow.html
secunia.com/advisories/19237 · Vendor Advisory
secunia.com/advisories/19276
debian.org/security/2006/dsa-1009
osvdb.org/23904
securityfocus.com/bid/17093 · Exploit
vupen.com/english/advisories/2006/0951
exchange.xforce.ibmcloud.com/vulnerabilities/25252
exploit-db.com/exploits/1582

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free