Bug 795357 (CVE-2012-1189)

Summary: CVE-2012-1189 torcs: Stack-based buffer overflow by processing specially-crafted audio file name in "engine sample" attribute
Product: [Other] Security Response Reporter: Jan Lieskovsky <jlieskov>
Component: vulnerabilityAssignee: Red Hat Product Security <security-response-team>
Status: CLOSED CURRENTRELEASE QA Contact:
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: henri, matthias
Target Milestone: ---Keywords: Security
Target Release: ---   
Hardware: All   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2018-03-22 01:51:52 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 795361    
Bug Blocks:    

Description Jan Lieskovsky 2012-02-20 10:23:35 UTC 
A stack-based buffer overflow flaw was found in the way TORCS, the Open Racing Car Simulator, performed sound initialization. If a local, unsuspecting user was tricked into opening a specially-crafted audio file name via "engine sample" XML configuration file attribute, it could lead to 'torcs' executable crash, or, potentially arbitrary code execution with the privileges of the user running torcs.

References:
[1] http://www.openwall.com/lists/oss-security/2012/02/18/2
    (OSS mailing post with further details)
[2] http://www.exploit-db.com/exploits/18471/
    (MS Windows XP Service Pack 3 exploit)
[3] http://torcs.sourceforge.net/
    (upstream page, version v1.3.3 is listed as latest)
Comment 1 Jan Lieskovsky 2012-02-20 10:29:40 UTC 
This issue affects the versions of the torcs package, as shipped with Fedora release of 15 and 16. Please schedule an update.
Comment 2 Jan Lieskovsky 2012-02-20 10:31:15 UTC 
Created torcs tracking bugs for this issue

Affects: fedora-all [bug 795361]
Comment 5 Vincent Danen 2018-03-22 01:51:52 UTC 
Fixed in 1.3.3, current version in Fedora is 1.3.7.