• info
• discussion
• exploit
• solution
• references

SkinCrafter 'InitLicenKeys()' Function Buffer Overflow Vulnerability

SkinCrafter is prone to a buffer-overflow vulnerability because it fails to perform boundary checks before copying user-supplied data to insufficiently sized memory buffers.

An attacker may exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition.

SkinCrafter 3.0 is vulnerable; other versions may also be affected.