Best Way GEM Engine Multiple Vulnerabilities
BID:40145
Info
Best Way GEM Engine Multiple Vulnerabilities
| Bugtraq ID: | 40145 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 12 2009 12:00AM |
| Updated: | Aug 12 2009 12:00AM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
Best Way Men of War 1.17.5 Best Way Men of War 1.11.3 Best Way Majesty 2 1.3.336.0 Best Way GEM Engine 3 Best Way GEM Engine 2 Best Way Faces of War 1.4.1 |
| Not Vulnerable: | |
Discussion
Best Way GEM Engine Multiple Vulnerabilities
GEM Engine is prone to multiple vulnerabilities including multiple denial-of-service issues and a buffer-overflow issue.
An attacker can exploit these issues to cause applications using the engine to crash, resulting in a denial-of-service condition, or to execute arbitrary code in the context of the vulnerable application. Other attacks may also be possible.
GEM Engine 2 and GEM Engine 3 are vulnerable.
GEM Engine is prone to multiple vulnerabilities including multiple denial-of-service issues and a buffer-overflow issue.
An attacker can exploit these issues to cause applications using the engine to crash, resulting in a denial-of-service condition, or to execute arbitrary code in the context of the vulnerable application. Other attacks may also be possible.
GEM Engine 2 and GEM Engine 3 are vulnerable.
Exploit / POC
Best Way GEM Engine Multiple Vulnerabilities
An attacker can use readily available network tools to exploit these issues.
The following exploit code is available:
An attacker can use readily available network tools to exploit these issues.
The following exploit code is available:
Solution / Fix
Best Way GEM Engine Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Best Way GEM Engine Multiple Vulnerabilities
References:
References:
- Best Way Homepage (Best Way)
- Best Way Products Page (Best Way)