vendor:
TORCS
by:
Andres Gomez and David Mora
7,5
CVSS
HIGH
Buffer Overflow
119
CWE
Product Name: TORCS
Affected Version From: 1.3.2
Affected Version To: 1.3.2
Patch Exists: YES
Related CWE: N/A
CPE: a:torcs:torcs
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: Windows XP
2012
TORCS <= 1.3.2 buffer overflow /SAFESEH evasion
A buffer overflow vulnerability exists in TORCS version 1.3.2. An attacker can exploit this vulnerability by creating a template.xml file with malicious code and placing it in the torcs/cars/sc-f1/ directory, replacing sc-f1.xml. When the attacker chooses the car and runs a race, Torcs will crash.
Mitigation:
Upgrade to the latest version of TORCS.
