PT-2007-7302 · Unknown · Hammer Of Thyrion

Published 2007-12-20 · Updated 2011-03-08 · CVE-2007-6468

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hammer of Thyrion version 1.4.2

Description A buffer overflow issue exists in the HuffDecode function, located in hw utils/hwrcon/huffman.c and hexenworld/Client/huffman.c, allowing remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet.

Recommendations For Hammer of Thyrion version 1.4.2, consider disabling the HuffDecode function as a temporary workaround until a patch is available. Restrict access to the huffman encoded packet handling module to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2007-6468

Affected Products

Hammer Of Thyrion

References · 8

• 🔥 http://uhexen2.cvs.sourceforge.net/uhexen2/hexenworld/Client/huffman.c?r1=1.24&r2=1.25 · Exploit
• 🔥 http://uhexen2.cvs.sourceforge.net/uhexen2/hw_utils/hwrcon/huffman.c?r1=1.18&r2=1.19 · Exploit
• http://secunia.com/advisories/28124 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2007-6468 · Security Note
• http://sourceforge.net/project/shownotes.php?release_id=562016&group_id=124987 · Note
• http://osvdb.org/42641 · Note
• http://securityfocus.com/bid/26893 · Note
• http://vupen.com/english/advisories/2007/4239 · Note