CVE-2006-1539

Name	CVE-2006-1539
Description	Multiple buffer overflows in the checkscores function in scores.c in tetris-bsd in bsd-games before 2.17-r1 in Gentoo Linux might allow local users with games group membership to gain privileges by modifying tetris-bsd.scores to contain crafted executable content, which is executed when another user launches tetris-bsd.
Source	CVE (at NVD; CERT, LWN, oss-sec, fulldisc, Red Hat, Ubuntu, Gentoo, SUSE bugzilla/CVE, GitHub advisories/code/issues, web search, more)
Debian Bugs	361160

Vulnerable and fixed packages

The table below lists information on source packages.

Source Package	Release	Version	Status
bsdgames (PTS)	buster, bullseye	2.17-28	fixed
	bookworm	2.17-29	fixed
	sid, trixie	2.17-34	fixed

The information below is based on the following data on fixed versions.

Package	Type	Release	Fixed Version	Urgency	Origin	Debian Bugs
bsdgames	source	(unstable)	2.17-6			361160

[sarge] - bsdgames <no-dsa> (Minor impact)