PT-2007-6957 · Rigs Of Rods Team · Rigs Of Rods

Published 2007-11-20 · Updated 2024-02-14 · CVE-2007-6041

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Rigs of Rods (RoR) versions prior to 0.33d SP1

Description The issue is related to a buffer overflow in the Sequencer::queueMessage function, which can be triggered by sending a nickname and then a vehicle name in a MSG2 USE VEHICLE message with a combined length that causes the overflow. This can lead to a denial of service (daemon crash) and potentially allow the execution of arbitrary code.

Recommendations For versions prior to 0.33d SP1, update to version 0.33d SP1 or later to resolve the issue. As a temporary workaround, consider restricting the length of nicknames and vehicle names in MSG2 USE VEHICLE messages to prevent the buffer overflow until a patch is applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-6041

Affected Products

Rigs Of Rods

References · 9

• 🔥 https://exploit-db.com/exploits/30779 · Exploit
• 🔥 http://aluigi.altervista.org/adv/rorbof-adv.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-6041 · Security Note
• http://secunia.com/advisories/27729 · Vendor Advisory
• http://aluigi.org/poc/rorbof.zip · Note
• http://forum.rigsofrods.com/index.php?topic=3140.0 · Note
• http://vupen.com/english/advisories/2007/3938 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/38549 · Note
• http://securityfocus.com/bid/26502 · Note