CVE-2006-1236
CrossFire 1.9.0 - Buffer Overflow via Long Setup Sound Command
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2006-1236. PoCs published by landser, Khaled Salem, Axua.
AI-analyzed exploit summary This exploit targets a remote buffer overflow in Crossfire Server's 'SetUp()' function, allowing arbitrary code execution via crafted packets. It includes shellcode for bind and connect-back shells, with configurable targets for versions 1.6.0, 1.8.0, and 1.9.0.
Description
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
Exploits (3)
This exploit targets a remote buffer overflow in Crossfire Server's 'SetUp()' function, allowing arbitrary code execution via crafted packets. It includes shellcode for bind and connect-back shells, with configurable targets for versions 1.6.0, 1.8.0, and 1.9.0.
This exploit targets a buffer overflow vulnerability in crossfire-server 1.9.0 via the 'SetUp()' function. It sends a crafted payload to overwrite EIP and execute shellcode, leading to remote code execution.
This is a functional exploit for CVE-2006-1236, targeting a buffer overflow vulnerability in the 'setup sound' command of a service listening on port 13327. The exploit uses a reverse TCP shellcode and leverages a JMP ECX instruction to redirect execution flow.