Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
BID:11354
Info
Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 11354 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 08 2004 12:00AM |
| Updated: | Oct 08 2004 12:00AM |
| Credit: | Discovery of this issue is credited to Luigi Auriemma <[email protected]>. |
| Vulnerable: |
Monolith Productions Shogo 2.2 Monolith Productions No One Lives Forever 1.0 .004 Monolith Productions Blood 2 2.1 Monolith Productions Alien versus Predator 2 1.0.9 .6 |
| Not Vulnerable: | |
Discussion
Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
Monolith Lithtech game engine is affected by a remote buffer overflow vulnerability. This issue is due to a failure of the application to verify the length of a string before copying it into a finite process buffer.
An attacker may leverage this issue to cause the affected game application to crash, denying service to legitimate users. This issue may also be leveraged to execute arbitrary code on the affected computer with the privileges of the user that activated the vulnerable game.
Monolith Lithtech game engine is affected by a remote buffer overflow vulnerability. This issue is due to a failure of the application to verify the length of a string before copying it into a finite process buffer.
An attacker may leverage this issue to cause the affected game application to crash, denying service to legitimate users. This issue may also be leveraged to execute arbitrary code on the affected computer with the privileges of the user that activated the vulnerable game.
Exploit / POC
Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
The following proof of concept has been provided:
The following proof of concept has been provided:
Solution / Fix
Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
Solution:
The following unofficial patches have been made available. It should be noted that these patches are not verified by Symantec:
Alien versus Predator 2 1.0.9.6
http://aluigi.altervista.org/patches/avp2-1096-fix.zip
Blood 2 2.1
http://aluigi.altervista.org/patches/blood2-21-fix.zip
No one lives forever 1.004
http://aluigi.altervista.org/patches/nolf1004-fix.zip
Shogo 2.2
http://aluigi.altervista.org/patches/shogo22-fix.zip
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
The following unofficial patches have been made available. It should be noted that these patches are not verified by Symantec:
Alien versus Predator 2 1.0.9.6
http://aluigi.altervista.org/patches/avp2-1096-fix.zip
Blood 2 2.1
http://aluigi.altervista.org/patches/blood2-21-fix.zip
No one lives forever 1.004
http://aluigi.altervista.org/patches/nolf1004-fix.zip
Shogo 2.2
http://aluigi.altervista.org/patches/shogo22-fix.zip
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Monolith Lithtech Game Engine Remote Buffer Overflow Vulnerability
References:
References:
- Monolith Productions Home Page (Monolith Productions)
- Limited \secure\ buffer-overflow in some old Monolith games (Luigi Auriemma