CVE-2005-3486

描述

Multiple format string vulnerabilities in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, and possibly other unspecified vectors.

如何修補 CVE-2005-3486

要修補 CVE-2005-3486,請將受影響套件升級到下列已修補版本。

• Debian/scorched3d—升級至 39.1+cvs20050929-2 或更新版本

CVE-2005-3486 正在被利用嗎?

中等 — EPSS 為 11.5%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 39.1+cvs20050929-2

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-3486