CVE-2006-0047 – Freeciv 2.0.7 - Jumbo Malloc Crash (Denial of Service)

https://notcve.org/view.php?id=CVE-2006-0047

packets.c in Freeciv 2.0 before 2.0.8 allows remote attackers to cause a denial of service (server crash) via crafted packets with negative compressed size values. • https://www.exploit-db.com/exploits/1557 http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=355211 http://secunia.com/advisories/19120 http://secunia.com/advisories/19227 http://secunia.com/advisories/19253 http://www.debian.org/security/2006/dsa-994 http://www.gentoo.org/security/en/glsa/glsa-200603-11.xml http://www.mandriva.com/security/advisories?name=MDKSA-2006:053 http://www.securityfocus.com/archive/1/426866/100/0/threaded http://www.securityfocus.com/bid/1697 • CWE-20: Improper Input Validation CWE-399: Resource Management Errors •