CVE-2006-1236
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote...
CVE-2006-1236 is a high vulnerability (CVSS 7.5) in Crossfire, published March 15, 2006. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 28.0%, the 98th percentile. Fixed in crossfire 1.9.0-2.
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
CVE-2006-1236- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
CVE-2006-1236- Updated
- 2026-11-02
EUVDEUVD-2006-1240 No score
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
EUVD-2006-1240- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3hxr-9gc8-927w No score
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote...
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
GHSA-3hxr-9gc8-927w- Updated
- 2026-11-02
OSV No score
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
CVE-2006-1236- Updated
- 2026-11-02
OSVDEBIAN-CVE-2006-1236 No score
Buffer overflow in the SetUp function in socket/request.c in CrossFire 1.9.0 allows remote attackers to execute arbitrary code via a long setup sound command, a different vulnerability than CVE-2006-1010.
- Record
DEBIAN-CVE-2006-1236- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
crossfireDebian:12 |
before 1.9.0-2 | 1.9.0-2 |
crossfireDebian:13 |
before 1.9.0-2 | 1.9.0-2 |
crossfireDebian:14 |
before 1.9.0-2 | 1.9.0-2 |
crossfireDebian:3.0 |
before 1.1.0-1woody2, plus listed versions 1.1.0-11.1.0-1woody1 |
1.1.0-1woody2 |
crossfireDebian:3.1 |
before 1.6.0.dfsg.1-4sarge2, plus listed versions 1.6.0.dfsg.1-41.6.0.dfsg.1-4sarge1 |
1.6.0.dfsg.1-4sarge2 |
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow | 2006-03-13 |
| Exploit-DB | crossfire-server 1.9.0 - 'SetUp()' Remote Buffer Overflow | 2021-08-18 |
| PoC in GitHub | Axua/CVE-2006-1236 | 2019-01-29 |
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, Exploit-DB, GitHub Advisories, NVD, OSV, PoC in GitHub |
References
vupen.com/english/advisories/2006/0951
cvs.sourceforge.net/viewcvs.py/crossfire/crossfire/socket/request.c?rev=1.86&view=log
secunia.com/advisories/19276
exploit-db.com/exploits/1582
debian.org/security/2006/dsa-1009