PT-2002-1211 · Clanlib · Clanlib

Published 2002-03-15 · Updated 2008-09-11 · CVE-2002-0125

Positive Technologies (AI Summary)

CVSS v2.0

7.2

High

Base vector

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions ClanLib library version 0.5

Description A buffer overflow issue in the ClanLib library may allow local users to execute arbitrary code in games that utilize the library. This could potentially affect various games, including Super Methane Brothers, Star War, Kwirk, and Clankanoid, among others. The issue can be triggered via a long HOME environment variable.

Recommendations For ClanLib library version 0.5, consider restricting the length of the HOME environment variable to prevent potential buffer overflow exploitation until a patch is available.

Fix

Related Identifiers

CVE-2002-0125

Affected Products

Clanlib

References · 4

• http://online.securityfocus.com/archive/1/250414 · Vendor Advisory
• http://iss.net/security_center/static/7905.php · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2002-0125 · Security Note
• http://securityfocus.com/bid/3877 · Note