Bug#370146: netpanzer: [CVE-2006-2575] setFrame() Denial of Service Vulnerability

[SALVETTI Djoume]

Package: netpanzer
Severity: normal
Tags: security


Good day,

CVE-2006-2575 :

| The setFrame function in Lib/2D/Surface.hpp for NetPanzer 0.8 and
| earlier allows remote attackers to cause a
| denial of service (crash) via a client flag (frameNum) that is greater
| than 41, which triggers an assert
| error.

See also : http://aluigi.altervista.org/adv/panza-adv.txt

Please mention the CVE number in the changelog when fixing it.

Regards
-- 
Djoume SALVETTI

-- System Information:
Debian Release: testing/unstable
  APT prefers unstable
  APT policy: (500, 'unstable'), (1, 'experimental')
Architecture: powerpc (ppc)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.15-1-powerpc
Locale: LANG=fr_FR.UTF-8, LC_CTYPE=fr_FR.UTF-8 (charmap=UTF-8)