Buffer overflow in the READ_TCP_STRING function in game_message_functions.cpp in the network plugin for C'Nedra 0.4.0 and earlier allows remote attackers to execute arbitrary code via a long text string.Referenceshttp://marc.info/?l=bugtraq&m=111713300212601&w=2http://aluigi.altervista.org/adv/cnedrabof-adv.txthttp://secunia.com/advisories/15519