CVE-2006-3400
Quake 3 Engine - Stack-Based Buffer Overflow in CG_ServerCommand
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-3400. PoCs published by RunningBon.
AI-analyzed exploit summary This exploit targets a stack overflow in the Quake 3 Engine's CG_ServerCommand() function. It uses a DLL injection technique with Microsoft Detours to hook the SV_SendServerCommand function and trigger the overflow with a crafted payload.
Description
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
Exploits (1)
This exploit targets a stack overflow in the Quake 3 Engine's CG_ServerCommand() function. It uses a DLL injection technique with Microsoft Detours to hook the SV_SendServerCommand function and trigger the overflow with a crafted payload.