PT-2005-3687 · Urban · Urban

Shaun Colley · Publicado 2005-09-07 · Atualizado 2016-10-18 · CVE-2005-2810

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions urban versions prior to 1.5.3

Description The issue is related to multiple stack-based buffer overflows that can be exploited by local users to gain privileges. This can be achieved by setting a long HOME environment variable, which affects various components, including config.cc, game.cc, highscor.cc, and meny.cc.

Recommendations For versions prior to 1.5.3, update to version 1.5.3 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2005-2810

Produtos afetados

Urban

Referências · 5

• http://vuxml.org/freebsd/08df5d46-1baf-11da-8038-0040f42d58c6.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2810 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=112604855119036&w=2 · Nota
• http://securitytracker.com/id?1014848 · Aviso do Fabricante
• http://freebsd.org/cgi/cvsweb.cgi/ports/games/urban/files · Correção