PT-2005-2775 · Firefly Studios · Stronghold 2

Luigi Auriemma · Published 2005-05-30 · Updated 2016-10-18 · CVE-2005-1808

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Firefly Studios Stronghold 2 versions 1.2 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in a crash. This is achieved by sending a packet with a large size value for the nickname, which leads to a memory allocation failure and generates an exception.

Recommendations For versions 1.2 and earlier, consider restricting or validating the size of the nickname value in incoming packets to prevent memory allocation failures until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-1808

Affected Products

Stronghold 2

References · 4

• 🔥 http://aluigi.altervista.org/adv/strong2boom-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1808 · Security Note
• http://marc.info/?l=bugtraq&m=111747562806999&w=2 · Note
• http://secunia.com/advisories/15556 · Note