Re: TORCS + PLIB Buffer overflow detected

Hi Andres

I think it is ok to publish it in the list, because TORCS is not a networki=
ng/priviledged application, so there should (!) be nothing "exploitable" (i=
f a user can run code and can run override/inject code in his own context i=
t is a nice "playground", but not much more, it just gets interesting when =
this can happen from "outside"/other user, is this the case?). But it shoul=
d be addressed for later network versions, where this could really hurt.

Thank you for the info.

Best regards

Bernhard

On Dec 20, 2011, at 16:04 , Andres Gomez wrote:

> Hi,
> =

> I have found an exploitable buffer overflow in torcs when it uses the lib=
rary plib, I dont know whether I should disclose details in this mailing li=
st or to another private mail.
> =

> =

> Regards,
> Andr=E9s G=F3mez
> =

> -------------------------------------------------------------------------=
-----
> Write once. Port to many.
> Get the SDK and tools to simplify cross-platform app development. Create =

> new or port existing apps to sell to consumers worldwide. Explore the =

> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
> http://p.sf.net/sfu/intel-appdev_________________________________________=
______
> Torcs-devel mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/torcs-devel


---------------------------------------------------------------------------=
---
Write once. Port to many.
Get the SDK and tools to simplify cross-platform app development. Create =

new or port existing apps to sell to consumers worldwide. Explore the =

Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
http://p.sf.net/sfu/intel-appdev