CVE-2011-4620

Executive Summary

Informations
Name	CVE-2011-4620	First vendor Publication	2011-12-30
Vendor	Cve	Last vendor Modification	2013-02-06

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Original Source

Url : http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4620

CWE : Common Weakness Enumeration

id	Name
CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer

CPE : Common Platform Enumeration

Type	Description	Count
Application	Steve J Baker Plib cpe:/a:steve_j_baker:plib:1.8.5	1

Open Source Vulnerability Database (OSVDB)

id	Description
77973	PLIB src/util/ulError.cxx ulSetError() Function Error Message Parsing Remote ...

Internal Sources (Detail)

Source	Url
EXPLOIT-DB	http://www.exploit-db.com/exploits/18258/
MLIST	http://openwall.com/lists/oss-security/2011/12/21/2
OSVDB	http://osvdb.org/77973
SECUNIA	http://secunia.com/advisories/47297
SUSE	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html