Beats Of Rage Multiple Format String Vulnerabilities

Bugtraq ID:	18088
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 23 2006 12:00AM
Updated:	May 24 2006 05:13PM
Credit:	Luigi Auriemma is credited with the discovery of these vulnerabilities.
Vulnerable:	Senile Team Beats Of Rage 0 OpenBOR OpenBOR 2.0 OpenBOR HOR 0
Not Vulnerable:

Beats Of Rage Multiple Format String Vulnerabilities

Beats of Rage is prone to multiple remote format-string vulnerabilities.

This issue arises when the application handles specially crafted mod files. An attacker can exploit this vulnerability by crafting a malicious mod file that contains format specifiers, and then coercing unsuspecting users to use the malicious mod files when running the application.

A successful attack may crash the application or lead to arbitrary code execution.

Beats Of Rage Multiple Format String Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Beats Of Rage Multiple Format String Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Beats Of Rage Multiple Format String Vulnerabilities

References:

• Beats Of Rage Homepage (Senile Team)
  
• format string vulnerabilities (Luigi Auriemma)
  
• HOR Homepage (OpenBOR)
  
• OpenBOR Homepage (OpenBOR)