Description
Integer signedness error in the network_receive_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large data_len value, which is cast to a signed short and results in a buffer overflow.
Published: 2007-03-02
Score: 10.0 Critical
EPSS: 2.6% Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

No analysis available yet.

Remediation

No remediation available yet.

Tracking

Sign in to view the affected projects.

Advisories
Source ID Title
EUVD EUVD EUVD-2006-7077 Integer signedness error in the network_receive_packet function in socket.c in dimension 3 engine (dim3) 1.5 and earlier allows remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via a large data_len value, which is cast to a signed short and results in a buffer overflow.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published:

Updated: 2024-08-07T20:50:06.385Z

Reserved: 2007-03-02T00:00:00.000Z

Link: CVE-2006-7095

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Deferred

Published: 2007-03-02T21:18:00.000

Modified: 2025-04-09T00:30:58.490

Link: CVE-2006-7095

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

No data.

Weaknesses