CVE-2005-0906: Instance Four Tincat

High severity, CVSS 7.5. EPSS: 4.9% chance of exploitation in the next 30 days.

Buffer overflow in a player logging function in the Tincat network library 2.x before 2.0.28, as used in games such as Sacred and The Settlers: Heritage of Kings, allows remote attackers to execute arbitrary code.

Affected products

• Instance Four Tincat: version release_2 only
• Sacred Sacred: version 1.8.2.6 only
• Ubi Soft The Settlersheritage Of Kings: version 1.0_2 only

Published 2005-05-02. Last modified 2026-06-16.