CVE

CVE-2004-1076

Date: (C)2005-01-10   (M)2023-12-22

Multiple buffer overflows in the RtConfigLoad function in rt-config.c for Atari800 before 1.3.4 allow local users to execute arbitrary code via large values in the configuration file.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 7.2
Exploit Score: 3.9
Impact Score: 10.0
CVSS V2 Metrics:
Access Vector: LOCAL
Access Complexity: LOW
Authentication: NONE
Confidentiality: COMPLETE
Integrity: COMPLETE
Availability: COMPLETE

Reference:

BID-11756

OSVDB-12610

SECUNIA-13670

http://marc.info/?l=bugtraq&m=110142899319841&w=2

http://marc.info/?l=bugtraq&m=110149441815270&w=2

DSA-609

http://cvs.sourceforge.net/viewcvs.py/atari800/atari800/DOC/ChangeLog?view=markup