Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

Linley Henzell Dungeon Crawl Unspecified Local Buffer Overflow Vulnerability

It has been reported that Linley Henzell Dungeon Crawl may be prone to a local buffer overflow vulnerability that may allow an attacker to ultimately execute arbitrary code in the context of the affected application. The software copies various environment variables into a fixed size buffer without proper bounds checking. An attacker may pass excessive data to a vulnerable application via an affected environment variable.

Crawl 4.0.0 beta 26 and prior may be prone to this issue.







 

Privacy Statement
Copyright 2009, SecurityFocus