PT-2007-5560 · Soldout · Babo Violent 2

Publicado 2007-08-16 · Atualizado 2018-10-15 · CVE-2007-4379

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Babo Violent 2 versions 2.08.00 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through several methods, including sending a value greater than 0x27 for specific data IDs, such as 0xca, 0xcb, 0xcc, 0xce, 0xcf, or 0xd0, using a nonexistent map name, or by sending a UDP packet that specifies a large data size.

Recommendations For Babo Violent 2 versions 2.08.00 and earlier, as a temporary workaround, consider restricting the input values for the affected data IDs to prevent values greater than 0x27 from being processed, and validate map names to ensure they exist before attempting to use them. Additionally, restrict UDP packet sizes to prevent large data sizes from being specified.

Exploit

Correção

Identificadores relacionados

CVE-2007-4379

Produtos afetados

Babo Violent 2

Referências · 9

• 🔥 http://securityfocus.com/bid/25329 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36016 · Nota
• http://secunia.com/advisories/26453 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2007-4379 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36014 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36017 · Nota
• http://securityfocus.com/archive/1/476520/100/0/threaded · Nota
• http://securityreason.com/securityalert/3024 · Nota
• http://aluigi.altervista.org/adv/bv2x-adv.txt · Nota