Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
sqclass.cpp in Squirrel through 2.2.5 and 3.x through 3.1 allows an out-of-bounds read (in the core interpreter) that can lead to Code Execution. If a victim executes an attacker-controlled squirrel script, it is possible for the attacker to break out of the squirrel script sandbox even if all dangerous functionality such as File System functions has been disabled. An attacker might abuse this bug to target (for example) Cloud services that allow customization via SquirrelScripts, or distribute malware through video games that embed a Squirrel Engine.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
SQUIRREL 缓冲区错误漏洞
Vulnerability Description
SQUIRREL是编程语言SQUIRREL 3.2稳定版。 SQUIRREL 2.2.5及之前版本和3.1及之前的3.x版本存在缓冲区错误漏洞，该漏洞源于sqclass.cpp允许越界读取（在核心解释器中），可导致代码执行，如果受害者执行攻击者控制的squirrel脚本，即使文件系统功能等所有危险功能已被禁用，攻击者仍有可能突破squirrel脚本沙盒，攻击者可能会滥用这个漏洞针对（例如）允许通过SquirrelScripts进行自定义的云服务或通过嵌入Squirrel引擎的视频游戏分发恶意软件。
CVSS Information
N/A
Vulnerability Type
N/A