Description
Project64 2.3.2 contains a buffer overflow vulnerability in the Plugin Directory settings field that allows local attackers to crash the application by supplying an excessively long string. Attackers can input a 6000-byte payload into the Plugin Directory field through the Options > Settings > Directories interface to trigger an application crash when settings are reopened.
Problem types
Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')
Product status
Credits
Gionathan "John" Reale
References
www.exploit-db.com/exploits/45229 (ExploitDB-45229)
www.pj64-emu.com (Official Product Homepage)
www.vulncheck.com/...-denial-of-service-via-plugin-directory (VulnCheck Advisory: Project64 2.3.2 Denial of Service via Plugin Directory)