• info
• discussion
• exploit
• solution
• references

Cheese Tracker XM Loader Buffer Overflow Vulnerability

Cheese Tracker is prone to a buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input data before copying it to an insufficiently sized memory buffer.

An attacker may cause malicious code to execute by supplying a malicious XM file. This may facilitate unauthorized remote access with the privileges of the user running the vulnerable application.