CVE-2006-1100

CVE-2006-1100 describes a buffer overflow vulnerability in the sgetstr function within shared/cube.h of Sauerbraten 2006_02_28 and earlier, impacting products derived from the Cube engine. This vulnerability allows remote attackers to execute arbitrary code by providing excessively long input data streams. With a CVSS score of 7.5, it is considered highly severe due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While not listed on the KEV catalog, exploit code is publicly available via ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.