4 ms·
I'm not talking about game rendering, but multiplayer games and game servers might be affected. I mean, the requested size must come from an external source. H
by pczarn 11y ago
I'm not talking about game rendering, but multiplayer games and game servers might be affected. I mean, the requested size must come from an external source.
Here's an example with a better description: https://www.verisign.com/en_US/security-services/security-intelligence/vulnerability-reports/articles/index.xhtml?id=814 https://www.verisign.com/en_US/security-services/security-in...
>(...) could allow an attacker to execute arbitrary code with the privileges of the current user.
>The vulnerability occurs when reading the header of the Pack200 compressed Jar file during decompression. To calculate the size of a heap buffer, the code multiplies and adds several 32-bit integers. The bounds of these values are not checked, and the arithmetic operations can overflow. This results in an undersized buffer being allocated, which leads to a heap-based buffer overflow.
I remember there was a similar bug in some other decompression library.