PT-2007-6957 · Rigs Of Rods Team · Rigs Of Rods

CVE-2007-6041 · Publicado 2007-11-20 · Atualizado 2024-02-14

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rigs of Rods (RoR) versions prior to 0.33d SP1

Description The issue is related to a buffer overflow in the Sequencer::queueMessage function, which can be triggered by sending a nickname and then a vehicle name in a MSG2 USE VEHICLE message with a combined length that causes the overflow. This can lead to a denial of service (daemon crash) and potentially allow the execution of arbitrary code.

Recommendations For versions prior to 0.33d SP1, update to version 0.33d SP1 or later to resolve the issue. As a temporary workaround, consider restricting the length of nicknames and vehicle names in MSG2 USE VEHICLE messages to prevent the buffer overflow until a patch is applied.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2007-6041

Produtos afetados

Rigs Of Rods

Referências · 9

• 🔥 https://exploit-db.com/exploits/30779 · Exploit
• 🔥 http://aluigi.altervista.org/adv/rorbof-adv.txt · Exploit
• http://aluigi.org/poc/rorbof.zip · Nota
• http://forum.rigsofrods.com/index.php?topic=3140.0 · Nota
• http://vupen.com/english/advisories/2007/3938 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-6041 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38549 · Nota
• http://securityfocus.com/bid/26502 · Nota
• http://secunia.com/advisories/27729 · Aviso do Fabricante