CVE-2009-4846

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2010-05-07 · updated 2026-06-16
Weakness: CWE-119

Description

Multiple buffer overflows in Deliantra Server before 2.82 allow remote attackers to execute arbitrary code via vectors related to (1) the command_gsay function in server/c_party.C and (2) the book implementation.

Affected products

Deliantra: through 2.81; 0.99, 0.9955, 0.9956, 0.9959, 0.9960, 0.9963 (+42)

References

http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82
http://cvs.schmorp.de/deliantra/server/server/c_party.C?r1=1.29&r2=1.30
http://secunia.com/advisories/37317
http://www.osvdb.org/59878
http://www.osvdb.org/59879
http://www.vupen.com/english/advisories/2009/3176
https://exchange.xforce.ibmcloud.com/vulnerabilities/54205
https://exchange.xforce.ibmcloud.com/vulnerabilities/54206
http://cvs.schmorp.de/deliantra/server/Changes?pathrev=rel-2_82
http://cvs.schmorp.de/deliantra/server/server/c_party.C?r1=1.29&r2=1.30
http://secunia.com/advisories/37317
http://www.osvdb.org/59878

Get alerted when CVE-2009-4846 or the next vulnerability affects your stack