CVE:CVE-2004-1587
CNNVD:CNNVD-200412-149
Monolith是多个在线游戏的引擎。
多个Monolith游戏对secure命令处理不正确，远程攻击者可以利用这个漏洞对游戏服务程序进行缓冲区溢出攻击，可能以进程权限在系统上执行任意指令。
攻击者只要发送secure GameSpy查询，并在后面追加68或更多字符，就会发生缓冲区溢出，精心构建提交请求，可导致以进程权限在系统上执行任意指令。
solution:Upgrade monolith_productions alien_versus_predator to a higher version than 2.1.0.9.6,and avoid the version 2.1.0.9.6; Upgrade monolith_productions blood to a higher version than 2_2.1,and avoid the version 2_2.1; Upgrade monolith_productions no_one_lives_forever to a higher version than 1.0.004,and avoid the version 1.0.004; Upgrade monolith_productions shogo to a higher version than 2.2,and avoid the version 2.2