PT-2006-4539 · Armagetron Advanced Team · Armagetron Advanced

Luigi Auriemma · Published 2006-07-18 · Updated 2017-07-20 · CVE-2006-3673

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armagetron Advanced versions 2.8.2 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by providing a large owner value, which triggers an assert error.

Recommendations For versions 2.8.2 and earlier, consider restricting the size of the owner value to prevent the assert error and subsequent application crash. As a temporary workaround, implement input validation to limit the owner value size until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2006-3673

Affected Products

Armagetron Advanced

References · 7

• 🔥 http://aluigi.altervista.org/adv/atrondos-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-3673 · Security Note
• http://secunia.com/advisories/21093 · Vendor Advisory
• http://securityfocus.com/bid/19015 · Note
• http://vupen.com/english/advisories/2006/2836 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27787 · Note
• http://securityreason.com/securityalert/1239 · Note