header-logo
Suggest Exploit
vendor:
UFO: Alien Invasion
by:
Node
7.5
CVSS
HIGH
Buffer Overflow
CWE
Product Name: UFO: Alien Invasion
Affected Version From: 2.2.2001
Affected Version To: 2.2.2001
Patch Exists: NO
Related CWE:
CPE:
Metasploit:
Other Scripts:
Platforms Tested: Windows 7 Ultimate x64 ENG
2010

UFO: Alien Invasion v2.2.1 BoF Exploit (Win7 ASLR and DEP Bypass)

This exploit allows for a buffer overflow in the UFO: Alien Invasion game version 2.2.1 on Windows 7. By redirecting the victim's DNS to a specific IP and having them click on the multiplayer lobby, an attacker can execute arbitrary code. The exploit has been tested on Windows 7 Ultimate x64 ENG. There is a possibility that this exploit can work on a different Windows version by changing the last bytes of the exploit code.

Mitigation:

Apply the latest version of the game which includes a patch for this vulnerability. Avoid clicking on suspicious multiplayer lobby links.
Source

Exploit-DB raw data: