Threats tagged 'ghsa-353f-5249-rrrg'

Netrek-client-cow versions through 3.3.3 have an out-of-bounds read vulnerability in the short.c handleSMessage() function. This flaw allows malicious Netrek servers or attackers intercepting the TCP connection to send crafted SP_S_MESSAGE packets with an m_recpt index of 36 or higher, causing the client to read beyond the bounds of internal arrays. This results in a denial of service by crashing the client application.