PT-2007-5560 · Soldout · Babo Violent 2

Published 2007-08-16 · Updated 2018-10-15 · CVE-2007-4379

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Babo Violent 2 versions 2.08.00 and earlier

Description The issue allows remote attackers to cause a denial of service, resulting in an application crash. This can be achieved through several methods, including sending a value greater than 0x27 for specific data IDs, such as 0xca, 0xcb, 0xcc, 0xce, 0xcf, or 0xd0, using a nonexistent map name, or by sending a UDP packet that specifies a large data size.

Recommendations For Babo Violent 2 versions 2.08.00 and earlier, as a temporary workaround, consider restricting the input values for the affected data IDs to prevent values greater than 0x27 from being processed, and validate map names to ensure they exist before attempting to use them. Additionally, restrict UDP packet sizes to prevent large data sizes from being specified.

Exploit

Fix

Related Identifiers

CVE-2007-4379

Affected Products

Babo Violent 2

References · 9

• 🔥 http://securityfocus.com/bid/25329 · Exploit
• http://secunia.com/advisories/26453 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-4379 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36016 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36014 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36017 · Note
• http://securityfocus.com/archive/1/476520/100/0/threaded · Note
• http://securityreason.com/securityalert/3024 · Note
• http://aluigi.altervista.org/adv/bv2x-adv.txt · Note