CVE-2009-3637
Published · Updated
3Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackepss 7.6%
exploitation probability
7.6%top 5% of all CVEs
observed exploitation
nono source reports it
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
Affected products
n/a · n/aReferences
http://icculus.org/alienarena/changelogs/7.31.txthttp://secunia.com/advisories/37118http://secunia.com/advisories/37256http://secunia.com/advisories/37259https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00179.htmlhttps://www.redhat.com/archives/fedora-package-announce/2009-November/msg00218.htmlhttp://www.ngssoftware.com/advisories/very-high-risk-vulnerability-in-alien-arena-730/http://www.securityfocus.com/archive/1/507369/100/0/threadedhttp://www.securityfocus.com/bid/36782http://www.vupen.com/english/advisories/2009/2997