Unscored severity · published Jul 8, 2010
CVE-2010-2445
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the…
–
CVSS
3.3%
EPSS
No
On KEV
Description
freeciv 2.2 before 2.2.1 and 2.3 before 2.3.0 allows attackers to read arbitrary files or execute arbitrary commands via a scenario that contains Lua functionality, related to the (1) os, (2) io, (3) package, (4) dofile, (5) loadfile, (6) loadlib, (7) module, and (8) require modules or functions.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.3% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
FR
Freeciv · Freeciv
2.2.0; 2.2.0; 2.2.0; 2.2.0; 2.2.0; 2.3.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2445
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2445
Patch
http://gna.org/bugs/?15624
packetstormsecurity.com
http://packetstormsecurity.com/files/163311/Android-2.0-FreeCIV-Arbitrary-Code-Execution.html
www.mandriva.com
http://www.mandriva.com/security/advisories?name=MDVSA-2010:205
www.openwall.com
http://www.openwall.com/lists/oss-security/2010/06/09/4
www.openwall.com
http://www.openwall.com/lists/oss-security/2010/06/24/5
www.osvdb.org
http://www.osvdb.org/65192
More from Freeciv
8.8
CVE-2022-39047
Freeciv before 2.6.7 and before 3.0.3 is prone to a buffer overflow vulnerability in the Modpack Installer utility's handling of the modpack URL
7.8
CVE-2026-90556
Freeciv before 3.2.6 Heap Buffer Overflow via worklist_load
7.5
CVE-2012-6083
Freeciv before 2.3.3 allows remote attackers to cause a denial of service via a crafted packet
7.5
CVE-2012-5645
A denial of service flaw was found in the way the server component of Freeciv before 2.3.4 processed certain packets
6.1
CVE-2026-90557
Freeciv 3.1.0 through 3.2.5 Out-of-Bounds Read via Savegame