Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
BID:15287
Info
Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
| Bugtraq ID: | 15287 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 02 2005 12:00AM |
| Updated: | Nov 02 2005 12:00AM |
| Credit: | Luigi Auriemma <[email protected]> is credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Johannes F. Kuhlmann FlatFrag 0.3 |
| Not Vulnerable: | |
Discussion
Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
Johannes F. Kuhlmann FlatFrag is prone to multiple remote buffer overflow and denial of service vulnerabilities. The buffer overflow issues are due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. The denial of service issue is due to an attempt to dereference a NULL pointer.
An attacker may exploit these issues to crash the application, or execute arbitrary machine code in the context of the affected application.
Versions 0.3 and prior are affected by these issues.
Johannes F. Kuhlmann FlatFrag is prone to multiple remote buffer overflow and denial of service vulnerabilities. The buffer overflow issues are due to a failure of the application to properly bounds check user-supplied data prior to copying it to an insufficiently sized memory buffer. The denial of service issue is due to an attempt to dereference a NULL pointer.
An attacker may exploit these issues to crash the application, or execute arbitrary machine code in the context of the affected application.
Versions 0.3 and prior are affected by these issues.
Exploit / POC
Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
A proof of concept exploit is available:
A proof of concept exploit is available:
Solution / Fix
Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Johannes F. Kuhlmann FlatFrag Multiple Remote Buffer Overflow And Denial Of Service Vulnerabilities
References:
References:
- FlatFrag Product Page (Johannes F. Kuhlmann )
- Buffer-overflow and crash in FlatFrag 0.3 (Luigi Auriemma