PT-2014-5817 · Ubisoft · Rayman Legends

Gjoko Krstic · Publicado 2014-06-19 · Atualizado 2014-06-20 · CVE-2014-4334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ubisoft Rayman Legends versions prior to 1.3.140380

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the "second connection" to TCP port 1001.

Recommendations For versions prior to 1.3.140380, update to version 1.3.140380 or later to resolve the issue.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2014-4334

Produtos afetados

Rayman Legends

Referências · 6

• 🔥 http://exploit-db.com/exploits/33804 · Exploit
• 🔥 http://securityfocus.com/bid/68080 · Exploit
• 🔥 http://packetstormsecurity.com/files/127133/Ubisoft-Rayman-Legends-1.2.103716-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/33804 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5187.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4334 · Nota de Segurança