Description
Multiple buffer overflows in Image Space rFactor 1.250 and earlier allow remote attackers to execute arbitrary code via a packet with ID (1) 0x80 or (2) 0x88 to UDP port 34297, related to the buffer containing the server version number.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a n/a
n/aaffected
References
- http://forum.racesimcentral.com/showthread.php?t=298659 ↗
- http://www.securityfocus.com/bid/25358 ↗
- http://securityreason.com/securityalert/3037 ↗
- http://aluigi.org/poc/rfactorx.zip ↗
- http://www.rfactor.net/?page=news_09-26_1255 ↗
- http://www.securityfocus.com/archive/1/480921/100/200/threaded ↗
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36093 ↗
- http://www.securityfocus.com/archive/1/480591/100/200/threaded ↗
- http://www.securityfocus.com/archive/1/477023/100/0/threaded ↗
- http://secunia.com/advisories/26526 ↗