PT-2002-1211 · Clanlib · Clanlib

Publicado 2002-03-15 · Atualizado 2008-09-11 · CVE-2002-0125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ClanLib library version 0.5

Description A buffer overflow issue in the ClanLib library may allow local users to execute arbitrary code in games that utilize the library. This could potentially affect various games, including Super Methane Brothers, Star War, Kwirk, and Clankanoid, among others. The issue can be triggered via a long HOME environment variable.

Recommendations For ClanLib library version 0.5, consider restricting the length of the HOME environment variable to prevent potential buffer overflow exploitation until a patch is available.

Correção

Identificadores relacionados

CVE-2002-0125

Produtos afetados

Clanlib

Referências · 4

• http://online.securityfocus.com/archive/1/250414 · Aviso do Fabricante
• http://securityfocus.com/bid/3877 · Nota
• http://iss.net/security_center/static/7905.php · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2002-0125 · Nota de Segurança