PT-2005-3290 · Unknown · Race Driver

Luigi Auriemma · Publicado 2005-07-26 · Atualizado 2016-10-18 · CVE-2005-2376

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Race Driver versions 1.20 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved by sending a long nickname or chat message.

Recommendations For versions 1.20 and earlier, consider restricting the length of nicknames and chat messages to prevent the denial of service. As a temporary workaround, implement input validation to limit the size of incoming messages until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-2376

Produtos afetados

Race Driver

Referências · 3

• 🔥 http://aluigi.altervista.org/adv/rdrum-adv.txt · Exploit
• http://marc.info/?l=bugtraq&m=112171364923678&w=2 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2376 · Nota de Segurança