PT-2005-3529 · Valusoft · Chris Moneymaker'S World Poker Championship

Luigi Auriemma · Published 2005-08-20 · Updated 2016-10-18 · CVE-2005-2639

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Chris Moneymaker's World Poker Championship version 1.0

Description The issue is a buffer overflow that can be triggered by a long nickname, allowing remote attackers to cause the application to crash and potentially execute arbitrary code.

Recommendations For Chris Moneymaker's World Poker Championship version 1.0, consider restricting the length of nicknames to prevent the buffer overflow until a patch is available.

Exploit

Fix

Related Identifiers

CVE-2005-2639

Affected Products

Chris Moneymaker'S World Poker Championship

References · 8

• 🔥 http://aluigi.altervista.org/adv/chmpokbof-adv.txt · Exploit
• 🔥 https://exploit-db.com/exploits/1156 · Exploit
• http://secunia.com/advisories/16478 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2639 · Security Note
• http://osvdb.org/18844 · Note
• http://securitytracker.com/id?1014738 · Note
• http://securityfocus.com/bid/14587 · Note
• http://marc.info/?l=bugtraq&m=112431235221271&w=2 · Note