PT-2005-2775 · Firefly Studios · Stronghold 2

Luigi Auriemma · Publicado 2005-05-30 · Atualizado 2016-10-18 · CVE-2005-1808

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firefly Studios Stronghold 2 versions 1.2 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a packet with a large size value for the nickname, which leads to a memory allocation failure and generates an exception.

Recommendations For versions 1.2 and earlier, consider restricting or validating the size of the nickname value in incoming packets to prevent memory allocation failures until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-1808

Produtos afetados

Stronghold 2

Referências · 4

• 🔥 http://aluigi.altervista.org/adv/strong2boom-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1808 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=111747562806999&w=2 · Nota
• http://secunia.com/advisories/15556 · Nota