CVE:CVE-2006-3400
CNNVD:CNNVD-200607-083
Soldier of Fortune 2 (SOF2MP) GOLD 1.03使用的Quake 3 Engine中的CG_ServerCommand函数存在基于堆栈的缓冲区溢出。远程攻击者可以通过从服务器发送长命令来造成拒绝服务并可能执行任意代码。
solution:Upgrade id_software quake_3_engine to a higher version than 1.32b,1.32c,icculus_812,and avoid the version 1.32b,1.32c,icculus_812; Upgrade raven_software soldier_of_fortune_2 to a higher version than 1.03,and avoid the version 1.03