Multiple buffer overflows in Scorched 3D 39.1 (bf) and earlier allow remote attackers to execute arbitrary code via various (1) GLConsole::addLine, (2) ServerCommon::sendString, (3) ServerCommon::serverLog functions, (4) a long command that is not properly handled in ComsMessageHandler.cpp when generating an error message, (5) a long UniqueID value in Logger.cpp, and possibly other unspecified vectors.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Scorched_3d | Scorched_3d | 39.1 (including) | 39.1 (including) |
| Scorched3d | Ubuntu | dapper | * |
| Scorched3d | Ubuntu | devel | * |
| Scorched3d | Ubuntu | edgy | * |
| Scorched3d | Ubuntu | feisty | * |