Gentoo has acknowledged some vulnerabilities in warzone2100, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

1) A boundary error in the "recvTextMessage()" function in src/multiplay.c can be exploited to cause a buffer overflow when sending overly long text messages (larger than 256 bytes) to a server.

2) A boundary error in the "NETrecvFile()" function in netplay.c can be exploited to cause a buffer overflow by sending a overly long mapname (larger than 128 bytes) to the client.

Successful exploitation allows crashing a vulnerable server or client and potentially execution of arbitrary code.

Solution
Update to "games-strategy/warzone2100-2.0.4" or later.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
Gentoo:
http://www.gentoo.org/security/en/glsa/glsa-200608-16.xml

Luigi Auriemma:
http://aluigi.altervista.org/adv/warzonebof-adv.txt

Deep Links
Links available to Secunia VIM customers