Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Buffer overflow in ClanLib library 0.5 may allow local users to execute arbitrary code in games that use the library, such as (1) Super Methane Brothers, (2) Star War, (3) Kwirk, (4) Clankanoid, and others, via a long HOME environment variable.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ClanLib HOME环境变量缓冲区溢出漏洞
Vulnerability Description
ClanLib是一个跨平台的游戏开发程序库。它包括了很多与图形，声音和资源管理相关的底层功能，被很多Linux发行版及Windows平台所使用。 ClanLib在处理环境变量时存在缓冲区溢出漏洞，攻击者可以通过溢出攻击以游戏进程的权限执行任意指令。 如果给HOME环境变量设置一个超长的字符串，ClanLib就会发生缓冲区溢出。在某些情况下可能改写程序的返回地址，导致执行攻击者指定的任意指令，在某些系统上，指令可能是以'games'的组权限执行的。使用了ClanLib库的游戏程序如果设置了suid/sgid
CVSS Information
N/A
Vulnerability Type
N/A