PT-2014-5817 · Ubisoft · Rayman Legends

Gjoko Krstic · Published 2014-06-19 · Updated 2014-06-20 · CVE-2014-4334

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Ubisoft Rayman Legends versions prior to 1.3.140380

Description The issue is a stack-based buffer overflow that allows remote attackers to execute arbitrary code. This is achieved by sending a long string in the "second connection" to TCP port 1001.

Recommendations For versions prior to 1.3.140380, update to version 1.3.140380 or later to resolve the issue.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2014-4334

Affected Products

Rayman Legends

References · 6

• 🔥 http://exploit-db.com/exploits/33804 · Exploit
• 🔥 http://securityfocus.com/bid/68080 · Exploit
• 🔥 http://packetstormsecurity.com/files/127133/Ubisoft-Rayman-Legends-1.2.103716-Buffer-Overflow.html · Exploit
• 🔥 https://exploit-db.com/exploits/33804 · Exploit
• 🔥 http://zeroscience.mk/en/vulnerabilities/ZSL-2014-5187.php · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2014-4334 · Security Note