CVE-2009-3637
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet...
CVE-2009-3637 is a high vulnerability (CVSS 10.0) in Icculus Alien Arena, published January 13, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 7.64%, the 94th percentile. Fixed in alien-arena 7.33-1.
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
Exploit likelihood
What each source reports
NVD Score used
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
CVE-2009-3637- CVSS 2.0
- 10.0 High
AV:N/AC:L/Au:N/C:C/I:C/A:C - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
CVE-2009-3637- Updated
- 2026-11-02
EUVDEUVD-2009-3612 No score
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
EUVD-2009-3612- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-c5xx-mwc6-vw82 No score
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet...
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
GHSA-c5xx-mwc6-vw82- Weakness
- CWE-119
- Updated
- 2026-11-02
OSV No score
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
CVE-2009-3637- Updated
- 2026-11-02
OSVDEBIAN-CVE-2009-3637 No score
Stack-based buffer overflow in the M_AddToServerList function in client/menu.c in Red Planet Arena Alien Arena 7.30 allows remote attackers to execute arbitrary code via a packet with a crafted server description to UDP port 27901 followed by a packet with a long print command.
- Record
DEBIAN-CVE-2009-3637- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
alien-arenaDebian:12 |
before 7.33-1, plus listed versions 6.05-16.05-46.05-4.16.10-27.0-17.0-1+lenny17.0-1+lenny2 |
7.33-1 |
alien-arenaDebian:13 |
before 7.33-1, plus listed versions 6.05-16.05-46.05-4.16.10-27.0-17.0-1+lenny17.0-1+lenny2 |
7.33-1 |
alien-arenaDebian:14 |
before 7.33-1, plus listed versions 6.05-16.05-46.05-4.16.10-27.0-17.0-1+lenny17.0-1+lenny2 |
7.33-1 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD, OSV |
References
securityfocus.com/archive/1/507369/100/0/threaded
icculus.org/alienarena/changelogs/7.31.txt
ngssoftware.com/advisories/very-high-risk-vulnerability-in-alien-arena-730
secunia.com/advisories/37118
Show 7 moreShow less
vupen.com/english/advisories/2009/2997
redhat.com/archives/fedora-package-announce/2009-November/msg00179.html
nvd.nist.gov/vuln/detail/CVE-2009-3637
github.com/advisories/GHSA-c5xx-mwc6-vw82
security-tracker.debian.org/tracker/CVE-2009-3637