7.5

CVE-2006-2408

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via (1) the raydium_log function in log.c or (2) the raydium_console_line_add function in console.c, possibly from a long player name.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
RaydiumRaydium Versionsvn_revision_283
RaydiumRaydium Versionsvn_revision_284
RaydiumRaydium Versionsvn_revision_285
RaydiumRaydium Versionsvn_revision_286
RaydiumRaydium Versionsvn_revision_287
RaydiumRaydium Versionsvn_revision_288
RaydiumRaydium Versionsvn_revision_289
RaydiumRaydium Versionsvn_revision_290
RaydiumRaydium Versionsvn_revision_291
RaydiumRaydium Versionsvn_revision_292
RaydiumRaydium Versionsvn_revision_293
RaydiumRaydium Versionsvn_revision_294
RaydiumRaydium Versionsvn_revision_295
RaydiumRaydium Versionsvn_revision_296
RaydiumRaydium Versionsvn_revision_297
RaydiumRaydium Versionsvn_revision_298
RaydiumRaydium Versionsvn_revision_299
RaydiumRaydium Versionsvn_revision_300
RaydiumRaydium Versionsvn_revision_301
RaydiumRaydium Versionsvn_revision_302
RaydiumRaydium Versionsvn_revision_303
RaydiumRaydium Versionsvn_revision_304
RaydiumRaydium Versionsvn_revision_305
RaydiumRaydium Versionsvn_revision_306
RaydiumRaydium Versionsvn_revision_307
RaydiumRaydium Versionsvn_revision_308
RaydiumRaydium Versionsvn_revision_309
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 19.63% 0.949
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.