VYPR

Kreed

by Burut

CVEs (3)

  • CVE-2004-1214Jan 10, 2005
    risk 0.04cvss epss 0.07

    Format string vulnerability in Kreed 1.05 and earlier allows remote attackers to execute arbitrary code via format specifiers in (1) a nickname or (2) message text.

  • CVE-2004-1215Jan 10, 2005
    risk 0.03cvss epss 0.06

    Kreed 1.05 and earlier allows remote attackers to cause a denial of service (server disconnect) via a long UDP packet, which causes a "message too long" socket error.

  • CVE-2004-1216Jan 10, 2005
    risk 0.03cvss epss 0.06

    The scripts that handle players in Kreed 1.05 and earlier allow remote attackers to cause a denial of service (server freeze) via a long (1) nickname or (2) model type, which generates dialog boxes on the server that must be manually handled before the server continues the game.