Description
Stack-based buffer overflow in Warzone 2100 and Warzone Resurrection 2.0.3 and earlier allows remote attackers to execute arbitrary code via a (1) long message handled by the recvTextMessage function in multiplay.c or a (2) long filename handled by NETrecvFile function in netplay/netplay.c.
References
- http://aluigi.altervista.org/adv/warzonebof-adv.txt
- warzone-recvtextmessage-bo(27910) vdb-entry
- ADV-2006-2943 vdb-entry
- 20060723 Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (SVN 127) mailing-list
- 1283 third-party-advisory
- 21474 third-party-advisory
- warzone-netrecvfile-bo(27915) vdb-entry
- 19118 vdb-entry
- GLSA-200608-16 vendor-advisory