Description
Stack-based buffer overflow in The Palace 3.5 and earlier client allows remote attackers to execute arbitrary code via a link to a palace:// url followed by a long server address string.
References
- 9602 vdb-entry
- palace-server-address-bo(15074) vdb-entry
- http://www.elitehaven.net/thepalace.txt
- 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability mailing-list
- 20040207 The Palace 3.x (Client) Stack Overflow Vulnerability mailing-list