Vulnerabilities (CVE)

Filtered by vendor Cor Entertainment Subscribe
Total 5 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2007-4754 1 Cor Entertainment 1 Alien Arena 2007 2023-12-10 7.5 HIGH N/A
Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in a nickname.
CVE-2007-4755 1 Cor Entertainment 1 Alien Arena 2007 2023-12-10 5.0 MEDIUM N/A
Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (client disconnect) by sending a client_connect command in a forged packet from the server to a client. NOTE: client IP addresses are available via product-specific queries.
CVE-2006-1147 1 Cor Entertainment 1 Alien Arena 2006 2023-12-10 4.0 MEDIUM N/A
The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.
CVE-2006-1146 1 Cor Entertainment 1 Alien Arena 2006 2023-12-10 6.5 MEDIUM N/A
Stack-based buffer overflow in the Cmd_Say_f function in g_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code by sending a long message to the server.
CVE-2006-1145 1 Cor Entertainment 1 Alien Arena 2006 2023-12-10 6.5 MEDIUM N/A
Format string vulnerability in the safe_cprintf function in acebot_cmds.c in Alien Arena 2006 Gold Edition 5.00 allows remote attackers (possibly authenticated) to execute arbitrary code via unspecified vectors when the server sends crafted messages to the clients.