People Can Fly Painkiller Remote Buffer Overflow Vulnerability

Bugtraq ID:	11029
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 24 2004 12:00AM
Updated:	Aug 24 2004 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	People can Fly Painkiller 1.3.1
Not Vulnerable:

People Can Fly Painkiller Remote Buffer Overflow Vulnerability

Painkiller is reported prone to a remote buffer overflow vulnerability. This issue presents itself due to insufficient boundary checks performed by the application during a connection request.

Painkiller versions 1.3.1 and prior are reported vulnerable to this issue.

People Can Fly Painkiller Remote Buffer Overflow Vulnerability

A proof of concept is available from the following location:
http://aluigi.altervista.org/poc/painkex.zip

People Can Fly Painkiller Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

People Can Fly Painkiller Remote Buffer Overflow Vulnerability

References:

• Painkiller Homepage (Painkiller)
  
• Limited buffer overflow in Painkiller 1.31 (Luigi Auriemma )