PT-2006-4539 · Armagetron Advanced Team · Armagetron Advanced

Luigi Auriemma · Publicado 2006-07-18 · Atualizado 2017-07-20 · CVE-2006-3673

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Armagetron Advanced versions 2.8.2 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This is achieved by providing a large owner value, which triggers an assert error.

Recommendations For versions 2.8.2 and earlier, consider restricting the size of the owner value to prevent the assert error and subsequent application crash. As a temporary workaround, implement input validation to limit the owner value size until a patch is available.

Exploit

Correção

Identificadores relacionados

CVE-2006-3673

Produtos afetados

Armagetron Advanced

Referências · 7

• 🔥 http://aluigi.altervista.org/adv/atrondos-adv.txt · Exploit
• http://securityfocus.com/bid/19015 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2006-3673 · Nota de Segurança
• http://vupen.com/english/advisories/2006/2836 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/27787 · Nota
• http://securityreason.com/securityalert/1239 · Nota
• http://secunia.com/advisories/21093 · Aviso do Fabricante