Quake 2 Lithium II Mod Memory Corruption Vulnerability

Bugtraq ID:	14664
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 25 2005 12:00AM
Updated:	Aug 25 2005 12:00AM
Credit:	Discovery is credited to <[email protected]>.
Vulnerable:	Lithium Software Lithium II Mod 1.24
Not Vulnerable:

Quake 2 Lithium II Mod Memory Corruption Vulnerability

Quake 2 Lithium II Mod is affected by a memory corruption vulnerability.

A successful attack may allow the attacker to corrupt process memory and execute arbitrary code resulting in unauthorized remote access.

It is conjectured that this issue may also facilitate format string attacks, however, this has not been confirmed at the moment.

Lithium II version 1.24 is affected by this vulnerability.

Quake 2 Lithium II Mod Memory Corruption Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Quake 2 Lithium II Mod Memory Corruption Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Quake 2 Lithium II Mod Memory Corruption Vulnerability

References:

• Lithium II Mod Product Page (Lithium Software)
  
• Quake 2 Lithium Mod V 1.24 Macro Expansion Vuln? ([email protected])