Rebellion Aliens vs Predator Multiple Memory Corruption Vulnerabilities

Bugtraq ID:	40041
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	May 07 2010 12:00AM
Updated:	May 07 2010 12:00AM
Credit:	Luigi Auriemma
Vulnerable:	Rebellion Aliens vs Predator 2.22
Not Vulnerable:

Rebellion Aliens vs Predator Multiple Memory Corruption Vulnerabilities

Rebellion Aliens vs Predator is prone to multiple memory-corruption vulnerabilities.

Successfully exploiting these issues allows remote attackers to cause denial-of-service conditions. Due to the nature of these issues, arbitrary code execution may be possible; this has not been confirmed.

Aliens vs Predator 2.22 is vulnerable; other versions may also be affected.

Rebellion Aliens vs Predator Multiple Memory Corruption Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/avp3dos.c

Rebellion Aliens vs Predator Multiple Memory Corruption Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Rebellion Aliens vs Predator Multiple Memory Corruption Vulnerabilities

References:

• Alien versus Predator (Luigi Auriemma)
  
• Vendor Homepage (Rebellion)