ALT-PU-2017-2166-1
Closed vulnerabilities
Published: 2017-02-22
Modified: 2024-11-21
Modified: 2024-11-21
CVE-2016-9400
The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.
Severity: CRITICAL (9.8)
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References:
- [oss-security] 20161116 CVE Request: teeworlds: possible remote code execution on teeworlds client
- [oss-security] 20161116 CVE Request: teeworlds: possible remote code execution on teeworlds client
- [oss-security] 20161117 Re: CVE Request: teeworlds: possible remote code execution on teeworlds client
- [oss-security] 20161117 Re: CVE Request: teeworlds: possible remote code execution on teeworlds client
- 94381
- 94381
- https://github.com/teeworlds/teeworlds/commit/ff254722a2683867fcb3e67569ffd36226c4bc62
- https://github.com/teeworlds/teeworlds/commit/ff254722a2683867fcb3e67569ffd36226c4bc62
- FEDORA-2016-7470a63cd1
- FEDORA-2016-7470a63cd1
- GLSA-201705-13
- GLSA-201705-13
- https://www.teeworlds.com/?page=news&id=12086
- https://www.teeworlds.com/?page=news&id=12086