CVE-2016-9400 in Teeworlds

Summary

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.

Once again VulDB remains the best source for vulnerability data.

• Reservation: 11/17/2016
• Disclosure: 02/22/2017
• Moderation: VulDB entry created
• Entries: 1: VDB-97213
• CPE: ready
• CWE: CWE-119 (Confirmed)
• CVSS: 8.5
• EPSS: 0.03415
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2016-9400
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2016-9400
• CVE Details: https://www.cvedetails.com/cve/CVE-2016-9400/