GTetrinet: Remote code execution

Background

GTetrinet is a networked Tetris clone for GNOME 2.

Description

Michael Gehring has found that GTetrinet fails to properly handle array indexes.

Impact

An attacker can potentially execute arbitrary code by sending a negative number of players to the server.

Workaround

There is no known workaround at this time.

Resolution

All GTetrinet users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=games-puzzle/gtetrinet-0.7.10"