7.2
CVSSv2

CVE-2006-0176

Published: 11/01/2006 Updated: 19/10/2018
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
VMScore: 730
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Buffer overflow in certain functions in src/fileio.c and src/unix/fileio.c in xmame prior to 11 January 2006 may allow local users to gain privileges via a long (1) -lang, (2) -ctrlr, (3) -pb, or (4) -rec argument on many operating systems, and via a long (5) -jdev argument on Ubuntu Linux.

Vulnerable Product Search on Vulmon Subscribe to Product

xmame xmame 0.102

Exploits

/* Xmame 0102 (-lang) Local Buffer Overflow Exploit Coded BY Qnix Qnix@bsdmailorg #0x11 @EFNET icq : 234263 0x11org Advisory : kerneltraporg/node/6055 eg: Qnix ~ # /exploit /usr/games/bin/xmamex11 ************************************************** Xmame 0102 (-lang) Local Buffer Overflow Exploit Coded BY Qnix ****** ...
#!/usr/bin/ruby # # One of the PoC code for xmame "-lang" options # Advisory is base on : kerneltraporg/node/6055 # # by xwings at mysec dot org # url : wwwmysecorg , new website # Tested on : # Linux debian24 2427-2-386 #1 Mon May 16 16:47:51 JST 2005 i686 GNU/Linux # gcc version 403 20060104 (prerelease) (Ubuntu 402-6ubu ...