Scorched 3D Server Memory Corruption Vulnerabilities
BID:10086
Info
Scorched 3D Server Memory Corruption Vulnerabilities
| Bugtraq ID: | 10086 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 09 2004 12:00AM |
| Updated: | Apr 09 2004 12:00AM |
| Credit: | These issues were announced in a Gentoo advisory. |
| Vulnerable: |
Scorched 3D Scorched 3D 36.2 Scorched 3D Scorched 3D 36.1 Scorched 3D Scorched 3D 36.0 Scorched 3D Scorched 3D 35.0 |
| Not Vulnerable: |
Scorched 3D Scorched 3D 37.1 Scorched 3D Scorched 3D 37.0 |
Discussion
Scorched 3D Server Memory Corruption Vulnerabilities
The Scorched 3D server component has been reported prone to multiple memory corruption vulnerabilities. One of the issues is reportedly a heap-based buffer overrun that is exposed when a client supplies an excessive number of format string characters in the server chat box text input field.
Other unspecified issues related to bounds checking were also reported.
These issues could be exploited to crash the server or potentially execute arbitrary code.
The Scorched 3D server component has been reported prone to multiple memory corruption vulnerabilities. One of the issues is reportedly a heap-based buffer overrun that is exposed when a client supplies an excessive number of format string characters in the server chat box text input field.
Other unspecified issues related to bounds checking were also reported.
These issues could be exploited to crash the server or potentially execute arbitrary code.
Exploit / POC
Scorched 3D Server Memory Corruption Vulnerabilities
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Scorched 3D Server Memory Corruption Vulnerabilities
Solution:
Gentoo has released updates to address this issues. These updates maybe applied with the following commands:
# emerge sync
# emerge -pv ">=games-strategy/scorched3d-37"
# emerge ">=games-strategy/scorched3d-37"
This issue has been addressed in Scorched 3D 3.7 and later.
Scorched 3D Scorched 3D 35.0
Scorched 3D Scorched 3D 36.0
Scorched 3D Scorched 3D 36.1
Scorched 3D Scorched 3D 36.2
Solution:
Gentoo has released updates to address this issues. These updates maybe applied with the following commands:
# emerge sync
# emerge -pv ">=games-strategy/scorched3d-37"
# emerge ">=games-strategy/scorched3d-37"
This issue has been addressed in Scorched 3D 3.7 and later.
Scorched 3D Scorched 3D 35.0
-
Scorched 3D Scorched 3D 37.1
http://www.scorched3d.co.uk/
Scorched 3D Scorched 3D 36.0
-
Scorched 3D Scorched 3D 37.1
http://www.scorched3d.co.uk/
Scorched 3D Scorched 3D 36.1
-
Scorched 3D Scorched 3D 37.1
http://www.scorched3d.co.uk/
Scorched 3D Scorched 3D 36.2
-
Scorched 3D Scorched 3D 37.1
http://www.scorched3d.co.uk/
References
Scorched 3D Server Memory Corruption Vulnerabilities
References:
References: