Lucene search

K
cveMitreCVE-2006-3908
HistoryJul 27, 2006 - 10:04 p.m.

CVE-2006-3908

2006-07-2722:04:00
mitre
web.nvd.nist.gov
26
cve-2006-3908
format string vulnerability
consolestreambuf.cpp
game network engine
gne
denial of service
remote code execution
nvd

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.043

Percentile

92.4%

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.

Affected configurations

Nvd
Node
gillius_programminggame_networking_engineRange0.7
OR
gillius_programminggame_networking_engineMatchcvs_2006-07-23
VendorProductVersionCPE
gillius_programminggame_networking_engine*cpe:2.3:a:gillius_programming:game_networking_engine:*:*:*:*:*:*:*:*
gillius_programminggame_networking_enginecvs_2006-07-23cpe:2.3:a:gillius_programming:game_networking_engine:cvs_2006-07-23:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.5

Confidence

High

EPSS

0.043

Percentile

92.4%

Related for CVE-2006-3908