Lucene search

K
gentooGentoo FoundationGLSA-201311-01
HistoryNov 04, 2013 - 12:00 a.m.

Mednafen: Arbitrary code execution

2013-11-0400:00:00
Gentoo Foundation
security.gentoo.org
8

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.005

Percentile

76.3%

Background

Mednafen is an advanced NES, GB/GBC/GBA, TurboGrafx 16/CD, NGPC and Lynx emulator.

Description

An unspecified vulnerability has been discovered in Mednafen when using network play.

Impact

A remote server could execute arbitrary code with the privileges of the process.

Workaround

There is no known workaround at this time.

Resolution

All Mednafen users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=games-emulation/mednafen-0.8.13"
OSVersionArchitecturePackageVersionFilename
Gentooanyallgames-emulation/mednafen< 0.8.13UNKNOWN

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.005

Percentile

76.3%