|
Scorched 3D Multiple Vulnerabilities
|
|
Secunia Advisory:
|
SA17423
|
|
|
Release Date:
|
2005-11-04
|
|
Popularity:
|
12,670 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| Software: | Scorched 3D 36.x
Scorched 3D 37.x
Scorched 3D 38.x
Scorched 3D 39.x
|
|
|
Secunia CVSS-2 Score:
|
Available in Secunia business solutions 
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities
|
|
| Advisory Content (Page 1 of 3) | [ 1 ] [ 2 ] [ 3 ] | |
|
Description:
Luigi Auriemma has reported some vulnerabilities in Scorched 3D, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.
1) Some boundary and format string errors in various functions, can be exploited to cause a buffer overflow and may be exploited to execute arbitrary code.
2) An error in the handling of the "numplayers" field in "ServerConnectHandler.cpp" can be exploited to freeze a vulnerable server by sending a specially crafted request with a negative "numplayers" value.
3) An error in the creation of error messages in "ComsMessageHandler.cpp" can be exploited to cause a buffer overflow by sending an overly long command (more than 1024 bytes).
Successful exploitation may allow execution of arbitrary code.
4) An error in the handling of overly large values in "Logger.cpp" can be exploited to crash a vulnerable server via e.g. an overly large "UniqueID" value.
Successful exploitation may allow execution of arbitrary code.
The vulnerabilities have been reported in version 39.1 and prior. Other versions may also be affected.
Change Page:
[ 1 ] [ 2 ] [ 3 ]
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
