NetSight
IP …
critical9.3Public exploit code

CVE-2012-1189

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.

Affected products

VendorProductAffected versions
Bernhard WymannTorcs
through 1.3.2
Versions 1.2.3, 1.2.4, 1.3.0, 1.3.1
Speed-DreamsSpeed Dreams
All versions

Weakness classification

CWE-119

References