2 results · Clear filters · Feed
-
High 7.8
Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
Freeciv versions before 3.2.6 contain a heap buffer overflow in worklist_load() when processing savegame files with declared worklist lengths exceeding the fixed array bound of 64 elements. Attackers can craft malicious savegame files that write past the entr…
-
High 7.5
Crash when receiving specially-crafted packets
Freeciv21 is a free open source, turn-based, empire-building strategy game. Versions prior to 3.1.1 crash with a stack overflow when receiving specially-crafted packets. A remote attacker can use this to take down any public server. A malicious server can use…