CVE-2006-1194
ENet library < jul_2005 - Denial of Service via Large Command Length Packet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-1194. PoCs published by Luigi Auriemma.
AI-analyzed exploit summary This exploit targets multiple denial-of-service vulnerabilities in the ENet library by sending malformed packets. It includes two attack vectors: invalid memory access and allocation abort with fragment, both leading to a DoS condition.
Description
Integer signedness error in the enet_protocol_handle_incoming_commands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including (1) Cube, (2) Sauerbraten, and (3) Duke3d_w32, allows remote attackers to cause a denial of service (application crash) via a packet with a large command length value, which leads to an invalid memory access.
Exploits (1)
This exploit targets multiple denial-of-service vulnerabilities in the ENet library by sending malformed packets. It includes two attack vectors: invalid memory access and allocation abort with fragment, both leading to a DoS condition.