CVE-2006-4006
bomberclone bomberclone: no CVSS score yet. EPSS 9.2% chance of exploitation in the next 30 days.
The do_gameinfo function in BomberClone 0.11.6 and earlier, and possibly other functions, does not reset the packet data size, which causes the send_pkg function (packets.c) to use this data size when sending a reply, and allows remote attackers to read portions of server memory.
- EPSS
- 9.2% chance of exploitation in the next 30 days; higher than 95% of CVEs (scores of 2026-10-31)
- CWE
- CWE-200
- Published
- Modified
- Record from
- the NVD, synced
Affected
- bomberclone:bomberclone