CVE-2009-3591

Published: Oct 8, 2009Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Dopewars 1.5.12 allows remote attackers to cause a denial of service (segmentation fault) via a REQUESTJET message with an invalid location.

Affected (1)

Products: Ben Webb: Dopewars

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Ben Webb Dopewars	Version 1.5.12

Related CWEs

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (10)

http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033

Source: cve@mitre.org

Patch

http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033

Source: cve@mitre.org

http://secunia.com/advisories/36961

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/507012/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/36606

Source: cve@mitre.org

Exploit

http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/ChangeLog?view=markup&pathrev=1033

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://dopewars.svn.sourceforge.net/viewvc/dopewars/dopewars/trunk/src/serverside.c?r1=1023&r2=1033&pathrev=1033

Source: af854a3a-2127-422b-91ae-364da2661108

http://secunia.com/advisories/36961

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://www.securityfocus.com/archive/1/507012/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/36606

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit

Timeline

No history available yet.