medium6.8Public exploit code
CVE-2007-4508
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote att…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Asura Engine Challenge B Query - Remote Stack Buffer Overflow2007-08-22 · dos · multiple · Verified
Impact
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Rebellion | Rogue Trooper | through 1.0 |
| Rival Interactive | Prism | through 1.1.1.0 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/asurabof-adv.txt
- http://osvdb.org/39799
- http://secunia.com/advisories/24023
- http://secunia.com/advisories/26571
- http://securityreason.com/securityalert/3053
- http://www.securityfocus.com/archive/1/477357/100/0/threaded
- http://www.securityfocus.com/bid/25411
- http://www.vupen.com/english/advisories/2007/2955
- http://www.vupen.com/english/advisories/2007/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36221
- http://aluigi.altervista.org/adv/asurabof-adv.txt
- http://osvdb.org/39799
- http://secunia.com/advisories/24023
- http://secunia.com/advisories/26571
- http://securityreason.com/securityalert/3053
- http://www.securityfocus.com/archive/1/477357/100/0/threaded
- http://www.securityfocus.com/bid/25411
- http://www.vupen.com/english/advisories/2007/2955
- http://www.vupen.com/english/advisories/2007/2956
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36221