Bernhard Wymann TORCS up to 1.3.2 Configuration File memory corruption

Summaryinfo

A vulnerability categorized as critical has been discovered in Bernhard Wymann TORCS 1.2.3/1.2.4/1.3.0/1.3.1/1.3.2. This issue affects some unknown processing of the component Configuration File. The manipulation results in memory corruption. This vulnerability is identified as CVE-2012-1189. Additionally, an exploit exists. It is advisable to upgrade the affected component.

Detailsinfo

A vulnerability, which was classified as critical, was found in Bernhard Wymann TORCS 1.2.3/1.2.4/1.3.0/1.3.1/1.3.2. Affected is an unknown functionality of the component Configuration File. The manipulation with an unknown input leads to a memory corruption vulnerability. CWE is classifying the issue as CWE-119. The product performs operations on a memory buffer, but it can read from or write to a memory location that is outside of the intended boundary of the buffer. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

Stack-based buffer overflow in modules/graphic/ssgraph/grsound.cpp in The Open Racing Car Simulator (TORCS) before 1.3.3 and Speed Dreams allows user-assisted remote attackers to execute arbitrary code via a long file name in an engine sample attribute in an xml configuration file.

The weakness was released 10/08/2012 (Website). The advisory is shared for download at torcs.sourceforge.net. This vulnerability is traded as CVE-2012-1189 since 02/16/2012. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are unknown but a public exploit is available.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept.

Upgrading to version 1.3.1 eliminates this vulnerability.

The vulnerability is also documented in the databases at Exploit-DB (18471) and OSVDB (80899†). VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Bernhard Wymann

Name

• TORCS

Version

• 1.2.3
• 1.2.4
• 1.3.0
• 1.3.1
• 1.3.2

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion