CVE-2010-3439

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

It is possible to cause a DoS condition by causing the server to crash in alien-arena 7.33 by supplying various invalid parameters to the download command.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-20

Affected software

Vendor	Product	Versions
alien-arena	alien-arena	7.33

References

https://access.redhat.com/security/cve/cve-2010-3439Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575621Exploit, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3439Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3439Third Party Advisory
https://access.redhat.com/security/cve/cve-2010-3439Third Party Advisory
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=575621Exploit, Mailing List, Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-3439Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2010-3439Third Party Advisory

Timeline

Published: Nov 12, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2010

CVE-2010-34405.5babiloo 2.0.9 before 2.0.11 creates temporary files with predictable names when downloading and unpacking dictionary files, allowing a local CVE-2010-34417.5Multiple buffer overflows in abcm2ps before 5.9.12 might allow remote attackers to execute arbitrary code via (1) a crafted input file, rela CVE-2010-34424.7Multiple integer overflows in the snd_ctl_new function in sound/core/control.c in the Linux kernel before 2.6.36-rc5-next-20100929 allow loc CVE-2010-34435.0ctcphandler.cpp in Quassel before 0.6.3 and 0.7.x before 0.7.1 allows remote attackers to cause a denial of service (unresponsive IRC) via m CVE-2010-34447.5Buffer overflow in the log2vis_utf8 function in pyfribidi.c in GNU FriBidi 0.19.1, 0.19.2, and possibly other versions, as used in PyFriBidi CVE-2010-34455.0Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x CVE-2010-34474.3Cross-site scripting (XSS) vulnerability in view.php in the file viewer in Horde Gollem before 1.1.2 allows remote attackers to inject arbit CVE-2010-34484.9drivers/platform/x86/thinkpad_acpi.c in the Linux kernel before 2.6.34 on ThinkPad devices, when the X.Org X server is used, does not proper CVE-2010-34496.8Cross-site request forgery (CSRF) vulnerability in Redback before 1.2.4, as used in Apache Archiva 1.0 through 1.0.3, 1.1 through 1.1.4, 1.2 CVE-2010-34509.3Multiple directory traversal vulnerabilities in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allow remote attackers to overwrite arbitrary fi CVE-2010-34519.3Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service CVE-2010-34529.3Use-after-free vulnerability in oowriter in OpenOffice.org (OOo) 2.x and 3.x before 3.3 allows remote attackers to cause a denial of service