18 matches found
kartlanpwn
Kart"LAN"Pwn CVE-2024-45200 Information & Proof-of-Concept for Mario Kart 8 Deluxe's "KartLANPwn" stack-based buffer overflow vulnerability Written by Chad Hyatt | ---|--- CVE| CVE-2024-45200 CVSS 3.1| Undetermined Nintendo.. claims it's a 4.3/10 Bounty Paid| $512 H1 Report| 2611669 Discovered|...
ENLBufferPwn
ENLBufferPwn CVE-2022-47949 CVE: | CVE-2022-47949 ---|--- CVSS v3.1: | 9.8/10 Critical Authors: | PabloMK7, Rambo6Glaz, Fishguy6564 Reported: | August 8th, 2021 Mario Kart 7 April 14th, 2022 for the impacted WiiU and Switch games Disclosed: | December 22nd, 2022 Table of contents Description...
CVE-2024-45200
In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game...
Nintendo Mario Kart 8 Deluxe 安全漏洞
Nintendo Mario Kart 8 Deluxe is a karting game by Nintendo of Japan Nintendo. A security vulnerability exists in Nintendo Mario Kart 8 Deluxe prior to version 3.0.3, which stems from the presence of a stack-based buffer overflow vulnerability. An attacker could exploit this vulnerability to cause...
CVE-2024-45200
In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game...
CVE-2024-45200
Nintendo Mario Kart 8 Deluxe versions prior to v3.0.3 are vulnerable to a stack-based buffer overflow in the LAN/LDN local multiplayer implementation. The flaw, known as KartLANPwn , stems from the incorrect use of the Nintendo Pia library, where the LAN_CopyAppData function can be supplied with ...
PT-2024-31479 · Nintendo · Mario Kart 8 Deluxe +1
Name of the Vulnerable Software and Affected Versions: Mario Kart 8 Deluxe versions prior to 3.0.3 Description: The issue is caused by a stack-based buffer overflow in the LAN/LDN local multiplayer implementation, allowing a remote attacker to exploit it upon deserialization of session informatio...
CVE-2024-45200: Improper Control of Generation of Code
In Nintendo Mario Kart 8 Deluxe before 3.0.3, the LAN/LDN local multiplayer implementation allows a remote attacker to exploit a stack-based buffer overflow upon deserialization of session information via a malformed browse-reply packet, aka KartLANPwn. The victim is not required to join a game...
Exploit for CVE-2024-45200
Kart"LAN"Pwn CVE-2024-45200https://nvd.nist.gov/vuln/detai...
Exploit for CVE-2024-45200
Kart"LAN"Pwn CVE-2024-45200https://nvd.nist.gov/vuln/detai...
CVE-2022-47949
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...
CVE-2022-47949: Buffer Copy without Checking Size of Input
The Nintendo NetworkBuffer class, as used in Animal Crossing: New Horizons before 2.0.6 and other products, allows remote attackers to execute arbitrary code via a large UDP packet that causes a buffer overflow, aka ENLBufferPwn. The victim must join a game session with the attacker. Other affect...
Nintendo: [MK8DX] Improper ranking/replay file parsing
The vulnerability in the Mario Kart 8 Deluxe game involved improper ranking and replay file parsing. This allowed for potential exploitation, leading to potentially unintended consequences...
Nintendo: [MK8DX] Improper metadata validation 2
Vulnerability description not provided...
Nintendo: [MK8DX] Improper metadata parsing
Vulnerability description not provided...
Nintendo: [MK8DX] Improper verification of Competition creation allows to create "Official" competitions
. Introduction This vulnerability impacts: - Mario Kart 8 Deluxe on the Switch - Mario Kart 8 on the WiiU The vulnerability was fixed for Mario Kart 8 Deluxe the 7 December, 2022 with the release of v2.2 or v851968 for the internal version The vulnerability was fixed for Mario Kart 8 the 3 August...