Buffer overflow in Ufo: Alien Invasion Project
CVE-2009-10006
UFO: Alien Invasion versions up to and including 2.2.1 contain a buffer overflow vulnerability in its built-in IRC client component. When the client connects to an IRC server and receives a crafted numeric reply (specifically a 001 message…
Vulnerability class: Buffer Overflow
EPSS: 0.567 (98.2th percentile) — read the EPSS interpretation.
Affected products
- Ufo: Alien Invasion Project — versions 0
Weakness classification (CWE)
Public proof-of-concept exploits
References
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/w… (exploit)
- raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/o… (exploit)
- www.exploit-db.com/exploits/16864 (exploit)
- www.exploit-db.com/exploits/14013 (exploit)
- www.moddb.com/news/ufo-alien-invasion-231-released (vendor-advisory, patch)
- www.vulncheck.com/advisories/ufo-alien-invasion-irc-client-buffer-overflow (third-party-advisory)
Frequently asked questions
- What is CVE-2009-10006?
- CVE-2009-10006 is a vulnerability in Ufo: Alien Invasion Project, classified under Stack-based Buffer Overflow. Published 2025-08-22.
- Is CVE-2009-10006 known to be exploited?
- 3 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.