Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Vista

Linley Henzell Dungeon Crawl Unspecified Local Buffer Overflow Vulnerability

It has been reported that Linley Henzell Dungeon Crawl may be prone to a local buffer overflow vulnerability that may allow an attacker to ultimately execute arbitrary code in the context of the affected application. The software copies various environment variables into a fixed size buffer without proper bounds checking. An attacker may pass excessive data to a vulnerable application via an affected environment variable.

Crawl 4.0.0 beta 26 and prior may be prone to this issue.







 

Privacy Statement
Copyright 2008, SecurityFocus