Yager Development Yager Game Data Block Buffer Overflow Vulnerability

Bugtraq ID:	13177
Class:	Boundary Condition Error
CVE:	CVE-2005-1163
Remote:	Yes
Local:	No
Published:	Apr 14 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	Luigi Auriemma <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Yager Development Yager Game 5.24 Yager Development Yager Game 5.20 Yager Development Yager Game 5.0
Not Vulnerable:

Yager Development Yager Game Data Block Buffer Overflow Vulnerability

A remote buffer overflow vulnerability affects Yager Development Yager Game. This issue is due to a failure of the application to properly validate the length of user-supplied, network derived strings prior to copying them into static process buffers.

An attacker may exploit this issue to execute arbitrary code with the privileges of the user that activated the vulnerable application. This may facilitate unauthorized access or privilege escalation.

Yager Development Yager Game Data Block Buffer Overflow Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/yagerbof.zip
• /data/vulnerabilities/exploits/Yager.c

Yager Development Yager Game Data Block Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Yager Development Yager Game Data Block Buffer Overflow Vulnerability

References:

• Yager Game Home Page (YAGER Development)
  
• Multiple vulnerabilities in Yager 5.24 (Luigi Auriemma )
  
• Yager <= 5.24 Remote Buffer Overflow Exploit ()