CVE-2007-6041
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of...
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
Exploit likelihood
What each source reports
NVD Score used
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
- Record
CVE-2007-6041- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
- Record
CVE-2007-6041- Updated
- 2026-11-02
EUVDEUVD-2007-6011 No score
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
- Record
EUVD-2007-6011- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v68v-m7xj-6wc2 No score
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of...
Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.
- Record
GHSA-v68v-m7xj-6wc2- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Rigs of Rods 0.33d - 'Vehicle Name' Buffer Overflow | 2007-11-19 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, exploits, facts, references, title | Exploit-DB, GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-6041 is a high vulnerability (CVSS 7.5) in Rigs Of Rogs Of Rogs, published November 20, 2007. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 6.33%, the 93rd percentile. No source names a fixed version.
References
securityfocus.com/bid/26502
vupen.com/english/advisories/2007/3938
forum.rigsofrods.com/index.php?topic=3140.0
exchange.xforce.ibmcloud.com/vulnerabilities/38549
aluigi.altervista.org/adv/rorbof-adv.txt
aluigi.org/poc/rorbof.zip
secunia.com/advisories/27729
nvd.nist.gov/vuln/detail/CVE-2007-6041
github.com/advisories/GHSA-v68v-m7xj-6wc2