CVE-2006-3908

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

2.70%

Published

Jul 27, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in the flush_output function in ConsoleStreambuf.cpp in Game Network Engine (GNE) 0.70 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute code via format string specifiers in unspecified vectors involving output to the gout console.

Affected Products (2)

gillius_programming · game_networking_enginevulnerable

References (10)

http://aluigi.altervista.org/adv/gnefs-adv.txt

Vendor Advisory

http://gnelib.cvs.sourceforge.net/gnelib/gnelib/src/ConsoleStreambuf.cpp?r1=1.8&r2=1.9&sortby=date

http://www.securityfocus.com/bid/19154

Patch

http://www.vupen.com/english/advisories/2006/2993

https://exchange.xforce.ibmcloud.com/vulnerabilities/27959

http://aluigi.altervista.org/adv/gnefs-adv.txt

Vendor Advisory