Description
Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.
References
- 20050526 Buffer-overflow in C'Nedra 0.4.0 mailing-list
- http://aluigi.altervista.org/adv/cnedrabof-adv.txt
- 15519 third-party-advisory