CVE-2006-3908

Published: Jul 27, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.

Affected (2)

Products: Gillius Programming: Game Networking Engine

Gillius Programming

1 product

Game Networking Engine

Configuration A

2 vulnerable

Vulnerable Software	Affected Versions
Gillius Programming Game Networking Engine	version ≤ 0.7
Gillius Programming Game Networking Engine	Version cvs_2006-07-23

References (10)

http://aluigi.altervista.org/adv/gnefs-adv.txt

Source: cve@mitre.org

Vendor Advisory

http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date

Source: cve@mitre.org

http://www.securityfocus.com/bid/19154

Source: cve@mitre.org

Patch

http://www.vupen.com/english/advisories/2006/2993

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/27959

Source: cve@mitre.org

http://aluigi.altervista.org/adv/gnefs-adv.txt

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/19154

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.vupen.com/english/advisories/2006/2993

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/27959

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.