CVE-2006-3913 - CVE House
Back to Database
Status published High CVE-2006-3913

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15...

Vulnerability Description

Buffer overflow in Freeciv 2.1.0-beta1 and earlier, and SVN 15 Jul 2006 and earlier, allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a (1) negative chunk_length or a (2) large chunk->offset value in a PACKET_PLAYER_ATTRIBUTE_CHUNK packet in the generic_handle_player_attribute_chunk function in common/packets.c, and (3) a large packet->length value in the handle_unit_orders function in server/unithand.c.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2006-3913

Credits & Attribution

No credits recorded in the NVD database.

References

More from freeciv

View All →
CVE-2022-39047
Freeciv before 2.6.7 and before 3.0.3 is prone to a...
High 8.8
CVE-2012-6083
Freeciv before 2.3.3 allows remote attackers to cause a denial...
High 7.5
CVE-2012-5645
A denial of service flaw was found in the way...
High 7.5
CVE-2010-2445
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers...
Critical 10
CVE-2006-0047
packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to...
Medium 5

Affected Vendor

Affected Software

freeciv
Vulnerable Versions:
2.1.0_beta1

Timeline

Official Publish: July 28th, 2006
Last Modified: August 7th, 2024
Added to House: July 18th, 2026

CVSS Vectors

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.