CVE-2016-9400

Critical

Published: 22/02/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

The CClient::ProcessServerPacket method in Teeworlds before version 0.6.4 allows remote servers to write to arbitrary physical memory locations, potentially leading to arbitrary code execution.

Risk Assessment

Exploitation of this vulnerability could allow attackers to remotely take control of the system, posing a serious security threat to the organization.

Recommendation

It is recommended to update Teeworlds to version 0.6.4 or later to mitigate this vulnerability.

Original NVD description (English source)

The CClient::ProcessServerPacket method in engine/client/client.cpp in Teeworlds before 0.6.4 allows remote servers to write to arbitrary physical memory locations and possibly execute arbitrary code via vectors involving snap handling.