PT-2005-3529 · Valusoft · Chris Moneymaker'S World Poker Championship

Luigi Auriemma · Publicado 2005-08-20 · Atualizado 2016-10-18 · CVE-2005-2639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Chris Moneymaker's World Poker Championship version 1.0

Description The issue is a buffer overflow that can be triggered by a long nickname, allowing remote attackers to cause the application to crash and potentially execute arbitrary code.

Recommendations For Chris Moneymaker's World Poker Championship version 1.0, consider restricting the length of nicknames to prevent the buffer overflow until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2005-2639

Produtos afetados

Chris Moneymaker'S World Poker Championship

Referências · 8

• 🔥 http://aluigi.altervista.org/adv/chmpokbof-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1156 · Exploit
• http://secunia.com/advisories/16478 · Aviso do Fabricante
• http://osvdb.org/18844 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-2639 · Nota de Segurança
• http://securitytracker.com/id?1014738 · Nota
• http://securityfocus.com/bid/14587 · Nota
• http://marc.info/?l=bugtraq&m=112431235221271&w=2 · Nota