Every CVE Search/ Get API key

CVE-2011-4620

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1...

9.3 HighPublic exploitFix available

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Exploit likelihood

12.6%Down 9.5 points since Feb 4, 2022
90%50%10%1%

What each source reports

NVD Score used 9.3

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
CVE-2011-4620
CVSS 2.0
9.3 HighAV:N/AC:M/Au:N/C:C/I:C/A:C
Weakness
CWE-119
Updated
2026-11-02
CVE List No score

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
CVE-2011-4620
Updated
2026-11-02
EUVDEUVD-2011-4543 No score

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
EUVD-2011-4543
Updated
2026-11-03
GitHub AdvisoriesGHSA-f88m-j96j-6cvj No score

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1...

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
GHSA-f88m-j96j-6cvj
Weakness
CWE-119
Updated
2026-11-02
OSV No score

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
CVE-2011-4620
Updated
2026-11-02
OSVDEBIAN-CVE-2011-4620 No score

Buffer overflow in the ulSetError function in util/ulError.cxx in PLIB 1.8.5, as used in TORCS 1.3.1 and other products, allows user-assisted remote attackers to execute arbitrary code via vectors involving a long error message, as demonstrated by a crafted acc file for TORCS. NOTE: some of these details are obtained from third party information.

Record
DEBIAN-CVE-2011-4620
Updated
2026-11-02
OSVopenSUSE-SU-2024:10308-1 No score

libplib0-1.8.5+svn.2173-2.1 on GA media

These are all security issues fixed in the libplib0-1.8.5+svn.2173-2.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2024:10308-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
plib
Debian:12
before 1.8.5-5.1
1.8.5-5.1
plib
Debian:13
before 1.8.5-5.1
1.8.5-5.1
plib
Debian:14
before 1.8.5-5.1
1.8.5-5.1
plib
Debian:6.0
before 1.8.5-5+squeeze1, plus listed versions
1.8.5-5
1.8.5-5+squeeze1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBTORCS 1.3.1 - acc Buffer Overflow2011-12-20

History

History
RecordedChangedSources
facts
aliasesEUVD
first indexedCVE List, Exploit-DB, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2011-4620 is a high vulnerability (CVSS 9.3) in Steve J Baker Plib, published December 31, 2011. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 12.6%, the 96th percentile. Fixed in plib 1.8.5-5.1.

References

Show 7 moreShow less
MoveEnter Open