0verkill Game Client Multiple Local Buffer Overflow Vulnerabilities

Bugtraq ID:	9550
Class:	Boundary Condition Error
CVE:	CVE-2004-0238
Remote:	Yes
Local:	Yes
Published:	Feb 02 2004 12:00AM
Updated:	Jul 12 2009 02:06AM
Credit:	Discovery of these vulnerabilities has been credited to "Adam Zabrocki" <[email protected]>.
Vulnerable:	0verkill 0verkill 0.16
Not Vulnerable:

0verkill Game Client Multiple Local Buffer Overflow Vulnerabilities

The 0verkill game client has been reported prone to multiple instances of exploitable buffer overrun vulnerabilities. The functions that have been reported to be affected are load_cfg(), save_cfg() and send_message(). It has been reported that due to a lack of sufficient boundary checks performed on user supplied data, an attacker may exploit the issues to execute arbitrary instructions in the security context of the Overkill game client.

0verkill Game Client Multiple Local Buffer Overflow Vulnerabilities

The following proof of concept exploit has been supplied for Linux based systems.

• /data/vulnerabilities/exploits/0verkill-exploit.c

0verkill Game Client Multiple Local Buffer Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

0verkill Game Client Multiple Local Buffer Overflow Vulnerabilities

References:

• 0verkill Homepage (0verkill)
  
• 0verkill - little simple vulnerability. ("Adam Zabrocki" )