NVD Vulnerability Detail

CVE-2011-4620

Summary	Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.
Publication Date	Dec. 31, 2011, 10:55 a.m.
Registration Date	Jan. 28, 2021, 4:39 p.m.
Last Update	Nov. 21, 2024, 10:32 a.m.

Affected software configurations

Configuration1		or higher	or less	more than	less than
cpe:2.3:a:steve_j_baker:plib:1.8.5:::::::*

Related information, measures and tools

No	URL	タグ
1	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html	Third Party Advisory
2	http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html	Third Party Advisory
3	http://openwall.com/lists/oss-security/2011/12/21/2
4	http://osvdb.org/77973
5	http://secunia.com/advisories/47297	Third Party Advisory Vendor Advisory
6	http://secunia.com/advisories/51340	Third Party Advisory
7	http://www.exploit-db.com/exploits/18258/	Exploit Third Party Advisory
8	https://security.gentoo.org/glsa/201606-16	Third Party Advisory
9	http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00013.html	Third Party Advisory
10	https://security.gentoo.org/glsa/201606-16	Third Party Advisory
11	http://www.exploit-db.com/exploits/18258/	Exploit Third Party Advisory
12	http://secunia.com/advisories/51340	Third Party Advisory
13	http://secunia.com/advisories/47297	Third Party Advisory Vendor Advisory
14	http://osvdb.org/77973
15	http://openwall.com/lists/oss-security/2011/12/21/2
16	http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00015.html	Third Party Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性

Title	PLIB の util/ulError.cxx 内の ulSetError 関数におけるバッファオーバーフローの脆弱性
Summary	PLIB の util/ulError.cxx 内の ulSetError 関数には、バッファオーバーフローの脆弱性が存在します。
Possible impacts	攻撃者により、任意のコードを実行される可能性があります。
Solution	ベンダ情報および参考情報を参照して適切な対策を実施してください。
Publication Date	Dec. 31, 2011, midnight
Registration Date	Jan. 5, 2012, 4:21 p.m.
Last Update	Jan. 5, 2012, 4:21 p.m.

Affected System

Steve Baker

PLIB 1.8.5

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2011-4620	http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-4620
National Vulnerability Database (NVD)
2	CVE-2011-4620	http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-4620

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
SourceForge
1	PLIB	http://sourceforge.net/projects/plib/

Change Log

No	Changed Details	Date of change
0	[2012年01月05日] 掲載	Feb. 17, 2018, 10:37 a.m.