Carstens 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ca3de | Ca3de | * | * |
References
- http://aluigi.altervista.org/adv/ca3dex-adv.txt
- http://secunia.com/advisories/14483
- http://securitytracker.com/id?1013361
- http://www.securityfocus.com/bid/12727
- http://aluigi.altervista.org/adv/ca3dex-adv.txt
- http://secunia.com/advisories/14483
- http://securitytracker.com/id?1013361
- http://www.securityfocus.com/bid/12727