CVE-2006-2554
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow...
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
Exploit likelihood
What each source reports
NVD Score used
6.4
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
- Record
CVE-2006-2554- CVSS 2.0
- 6.4 Medium
AV:N/AC:L/Au:N/C:P/I:P/A:N - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
- Record
CVE-2006-2554- Updated
- 2026-11-02
EUVDEUVD-2006-2554 No score
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
- Record
EUVD-2006-2554- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-97wr-3q3r-8f66 No score
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow...
Buffer overflow in the tell_player_surr_changes function in Genecys 0.2 and earlier might allow remote attackers to execute arbitrary code via long arguments.
- Record
GHSA-97wr-3q3r-8f66- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Genecys 0.2 - Buffer Overflow / NULL Pointer (Denial of Service) | 2006-05-14 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-2554 is a medium vulnerability (CVSS 6.4) in Genecys, published May 24, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.5%, the 96th percentile. No source names a fixed version.