A vulnerability was found in White Dune up to 0.29beta791 and classified as critical. Affected by this issue is the function scene::errorf of the file scene.cpp. The manipulation with an unknown input leads to a memory corruption vulnerability. Using CWE to declare the problem leads to CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. Impacted is confidentiality, integrity, and availability. CVE summarizes:

Stack-based buffer overflow in the Scene::errorf function in Scene.cpp in White_Dune 0.29 beta791 and earlier allows remote attackers to execute arbitrary code via a long string in a .WRL file.

The weakness was presented 01/07/2008 by Luigi Auriemma (Website). The advisory is shared for download at securityfocus.com. This vulnerability is handled as CVE-2008-0100 since 01/07/2008. The exploitation is known to be easy. The attack may be launched remotely. No form of authentication is required for exploitation. Technical details as well as a public exploit are known.

The exploit is available at securityfocus.com. It is declared as proof-of-concept.

The vulnerability is also documented in the databases at X-Force (39385), Exploit-DB (30970), SecurityFocus (BID 27102†) and Secunia (SA28287†). See VDB-40389 for similar entry. If you want to get best quality of vulnerability data, you may have to visit VulDB.

Productinfo

Name

• White Dune

Version

• 0.29beta791

CPE 2.3info

• 🔍

CPE 2.2info

• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion