Secunia

Luigi Auriemma has reported two vulnerabilities in Sacrifice, which potentially can be exploited by malicious people to compromise a vulnerable system.

1) A format string error in game3d.dll when generating text strings for display can potentially be exploited to execute arbitrary code via a specially crafted string containing format specifiers.

2) A boundary error in the online chat interface can be exploited to cause a buffer overflow via a specially crafted, overly long (more than 256 bytes) string.

Both vulnerabilities can reportedly be exploited by sending specially crafted input to the software's IRC public chat channel.

The vulnerabilities have been reported in all versions up to and including patch #3.

Solution
Don't use the online chat functionality and play multiplayer games on trusted networks only.

Provided and/or discovered by
Luigi Auriemma

Original Advisory
http://aluigi.altervista.org/adv/sacrifice-adv.txt

Deep Links
Links available in Customer Area