CVE-2005-3487

描述

Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors.

如何修補 CVE-2005-3487

要修補 CVE-2005-3487,請將受影響套件升級到下列已修補版本。

• Debian/scorched3d—升級至 39.1+cvs20050929-2 或更新版本

CVE-2005-3487 正在被利用嗎?

中等 — EPSS 為 7.7%,可持續追蹤但非最高優先。

受影響套件(1)

• from 0, < 39.1+cvs20050929-2

參考連結(1)

• ADVISORYsecurity-tracker.debian.org/tracker/CVE-2005-3487