CVE-2012-1189 Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary cod...
HighCVSS 9.3
EPSS 9.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/torcs(Debian:12) | < 1.3.3-1 | 1.3.3-1 |
| debian/torcs(Debian:13) | < 1.3.3-1 | 1.3.3-1 |
| debian/torcs(Debian:14) | < 1.3.3-1 | 1.3.3-1 |
| bernhard wymann torcs | <= 1.3.2 | No fix listed |
| bernhard wymann torcs | = 1.2.3 | No fix listed |
| bernhard wymann torcs | = 1.2.4 | No fix listed |
| bernhard wymann torcs | = 1.3.0 | No fix listed |
| bernhard wymann torcs | = 1.3.1 | No fix listed |
| speed-dreams speed dreams | All versions | No fix listed |
References
- Debian Security Tracker CVE-2012-1189 vendor-advisory
- freecode.com patch
- torcs.sourceforge.net patch
- 18471 exploit
- [oss-security] 20120218 TORCS 1.3.2 xml buffer overflow - CVE-2012-1189 exploit mailing-list
- [oss-security] 20120305 Re: TORCS 1.3.2 xml buffer overflow - CVE-2012-1189 exploit mailing-list
- 79372 vdb-entry
- bugs.debian.org issue-tracking