PvPGN GameReport Packet Handler Remote Buffer Overflow Vulnerability

Bugtraq ID:	11641
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 09 2004 12:00AM
Updated:	Nov 09 2004 12:00AM
Credit:	This vulnerability was announced by the vendor.
Vulnerable:	PvPGN PvPGN 1.6.6 PvPGN PvPGN 1.6.5 PvPGN PvPGN 1.6.4 PvPGN PvPGN 1.6.3 PvPGN PvPGN 1.6.2 PvPGN PvPGN 1.6.1 PvPGN PvPGN 1.6 .0
Not Vulnerable:	PvPGN PvPGN 1.7.3

PvPGN GameReport Packet Handler Remote Buffer Overflow Vulnerability

PvPGN is reported prone to a remote buffer overflow vulnerability. This issue may allow an attacker to execute arbitrary code to gain unauthorized access to a vulnerable computer.

The issue exists due to insufficient boundary checks performed on 'gamereport' packets by the software.

This issue may result in a denial of service condition. If an attacker succeeds in overwriting sensitive process memory and redirecting process execution to malicious arbitrary code, this issue may allow the attacker to gain unauthorized access to a vulnerable computer.

PvPGN GameReport Packet Handler Remote Buffer Overflow Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PvPGN GameReport Packet Handler Remote Buffer Overflow Vulnerability

Solution:
The vendor has released an update to address this issue:

PvPGN GameReport Packet Handler Remote Buffer Overflow Vulnerability

References:

• PvPGN Home Page (PvPGN)
  
• Release Name: 1.7.3 (PvPGN)