CVE-2007-4508 Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a lo...
MediumCVSS 6.8
EPSS 6.0%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rebellion rogue trooper | <= 1.0 | No fix listed |
| rival interactive prism | <= 1.1.1.0 | No fix listed |
References
- aluigi.altervista.org
- 39799 vdb-entry
- 24023 third-party-advisory
- 26571 third-party-advisory
- 3053 third-party-advisory
- 20070822 Buffer-overflow in the Asura engine mailing-list
- 25411 exploit vdb-entry
- ADV-2007-2955 vdb-entry
- ADV-2007-2956 vdb-entry
- prism-guard-asura-engine-bo(36221) vdb-entry