exploitDog

CVE-2007-6041

Опубликовано: 20 нояб. 2007

Источник: nvd

CVSS2: 7.5

EPSS Низкий

Описание

Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.

Ссылки

http://aluigi.altervista.org/adv/rorbof-adv.txt
Exploit
http://aluigi.org/poc/rorbof.zip
http://forum.rigsofrods.com/index.php?topic=3140.0
URL Repurposed
http://secunia.com/advisories/27729
Patch
Vendor Advisory
http://www.securityfocus.com/bid/26502
http://www.vupen.com/english/advisories/2007/3938
https://exchange.xforce.ibmcloud.com/vulnerabilities/38549
http://aluigi.altervista.org/adv/rorbof-adv.txt
Exploit
http://aluigi.org/poc/rorbof.zip
http://forum.rigsofrods.com/index.php?topic=3140.0
URL Repurposed
http://secunia.com/advisories/27729
Patch
Vendor Advisory
http://www.securityfocus.com/bid/26502
http://www.vupen.com/english/advisories/2007/3938
https://exchange.xforce.ibmcloud.com/vulnerabilities/38549

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:rigs_of_rogs:rigs_of_rogs:*:*:*:*:*:*:*:*

Версия до 0.33d (включая)

EPSS

Процентиль: 93%

0.06326

Низкий

7.5 High

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-v68v-m7xj-6wc2

github

больше 4 лет назад

Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.

EPSS

Процентиль: 93%

0.06326

Низкий

7.5 High

CVSS2

Дефекты

CWE-119