PT-2005-2620 · Zoid · Zoidcom

Luigi Auriemma · Publicado 2005-05-17 · Atualizado 2017-07-11 · CVE-2005-1643

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Zoidcom versions 1.0 beta 4 and earlier

Description The issue allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value. This can lead to a memory allocation error or an out-of-bounds read.

Recommendations For Zoidcom versions 1.0 beta 4 and earlier, consider restricting access to the ZCom BitStream::Deserialize function until a patch is available. As a temporary workaround, implement packet size validation to prevent large size values from being processed.

Exploit

Correção

Identificadores relacionados

CVE-2005-1643

Produtos afetados

Zoidcom

Referências · 7

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-05/0107.html · Exploit
• 🔥 http://securitytracker.com/id?1013939 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1643 · Nota de Segurança
• http://aluigi.altervista.org/adv/zoidboom-adv.txt · Nota
• http://osvdb.org/16495 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/20511 · Nota
• http://zoidcom.com/download/changelog.txt · Correção