medium6.4Public exploit code
CVE-2006-2554
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service)2006-05-14 · dos · windows · Verified
Impact
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Genecys | Genecys | Version 0.2 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/genecysbof-adv.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html
- http://secunia.com/advisories/20099
- http://securityreason.com/securityalert/944
- http://www.osvdb.org/25481
- http://www.securityfocus.com/archive/1/433929/30/5010/threaded
- http://www.securityfocus.com/bid/17969
- http://www.vupen.com/english/advisories/2006/1815
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26519
- http://aluigi.altervista.org/adv/genecysbof-adv.txt
- http://lists.grok.org.uk/pipermail/full-disclosure/2006-May/046015.html
- http://secunia.com/advisories/20099
- http://securityreason.com/securityalert/944
- http://www.osvdb.org/25481
- http://www.securityfocus.com/archive/1/433929/30/5010/threaded
- http://www.securityfocus.com/bid/17969
- http://www.vupen.com/english/advisories/2006/1815
- https://exchange.xforce.ibmcloud.com/vulnerabilities/26519