← back
CVE-2007-6041

CVE-2007-6041

EPSS 6.3%
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30779unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://aluigi.altervista.org/adv/rorbof-adv.txthttp://aluigi.org/poc/rorbof.ziphttp://forum.rigsofrods.com/index.php?topic=3140.0http://secunia.com/advisories/27729https://exchange.xforce.ibmcloud.com/vulnerabilities/38549http://www.securityfocus.com/bid/26502http://www.vupen.com/english/advisories/2007/3938