QwikSec

Security Database

CVE

CWE

Training

CVE-2006-7095

Published: Mar 2, 2007

Modified: Aug 7, 2024

PUBLISHED

Description

Integer signedness error in the network_receive_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large data_len value, which is cast to a signed short and results in a buffer overflow.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

http://aluigi.altervista.org/adv/dim3bof-adv.txt

x_refsource_MISC

dim3-networkreceivepacket-bo(26082)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.