Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilities

Bugtraq ID:	9453
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 19 2004 12:00AM
Updated:	Jan 19 2004 12:00AM
Credit:	These vulnerabilities were announced by the vendor.
Vulnerable:	U-Foot Liquid War 5.5.6 U-Foot Liquid War 5.4.5
Not Vulnerable:	U-Foot Liquid War 5.6.1 U-Foot Liquid War 5.5.9

Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilities

Liquid war has been reported prone to multiple buffer overrun vulnerabilities. These issues are reported to exist due to a lack of sufficient bounds checking performed on user-supplied data before it is copied into a reserved buffer in memory.

Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilities

Solution:
The vendor has supplied an upgrade to address these issues:


U-Foot Liquid War 5.4.5

• U-Foot Liquid War 5.6.1
  http://www.ufoot.org/liquidwar/

U-Foot Liquid War 5.5.6

• U-Foot Liquid War 5.6.1
  http://www.ufoot.org/liquidwar/

Multiple Liquid War Undisclosed Buffer Overflow Vulnerabilities

References:

• Liquid War Homepage (U-Foot)