7.5

CVE-2006-3908

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Gillius Programming ≫ Game Networking Engine Versioncvs_2006-07-23
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.7% 0.84
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 7.5 10 6.4
AV:N/AC:L/Au:N/C:P/I:P/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://aluigi.altervista.org/adv/gnefs-adv.txt
Vendor Advisory
http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date
http://www.securityfocus.com/bid/19154
Patch
http://www.vupen.com/english/advisories/2006/2993
https://exchange.xforce.ibmcloud.com/vulnerabilities/27959