Ubisoft Rayman Legends 'memset()' Function Stack Based Buffer Overflow Vulnerability

Bugtraq ID:	68080
Class:	Boundary Condition Error
CVE:	CVE-2014-4334
Remote:	Yes
Local:	No
Published:	Jun 17 2014 12:00AM
Updated:	Jun 23 2014 12:23AM
Credit:	Gjoko Krstic
Vulnerable:
Not Vulnerable:

Ubisoft Rayman Legends 'memset()' Function Stack Based Buffer Overflow Vulnerability

Ubisoft Rayman Legends is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input.

An attacker can leverage this issue to execute arbitrary code in the context of the vulnerable application. Failed exploit attempts will likely result in denial-of-service conditions.

Rayman Legends 1.2.103716, 1.1.100477 and 1.0.95278 are vulnerable; other versions may also be affected.

Ubisoft Rayman Legends 'memset()' Function Stack Based Buffer Overflow Vulnerability

The following proof-of-concept is available:

• /data/vulnerabilities/exploits/68080.pl

Ubisoft Rayman Legends 'memset()' Function Stack Based Buffer Overflow Vulnerability

Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.

Ubisoft Rayman Legends 'memset()' Function Stack Based Buffer Overflow Vulnerability

References: