CVE-2007-6041

Rigs of Rods <0.33d SP1 - Buffer Overflow

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2007-6041. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text describes a remote buffer overflow vulnerability in Rigs of Rods 0.33d and prior versions, where insufficient bounds checking on user-supplied data can lead to arbitrary code execution or denial of service. The reference links to a binary exploit but does not include actual exploit code.

Description

Buffer overflow in the Sequencer::queueMessage function in sequencer.cpp in the server in Rigs of Rods (RoR) before 0.33d SP1 allows remote attackers to cause a denial of service (daemon crash) and possibly execute arbitrary code by sending a nickname, then a vehicle name in a MSG2_USE_VEHICLE message, in which the combined length triggers the overflow.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdosmultiple
https://www.exploit-db.com/exploits/30779

The provided text describes a remote buffer overflow vulnerability in Rigs of Rods 0.33d and prior versions, where insufficient bounds checking on user-supplied data can lead to arbitrary code execution or denial of service. The reference links to a binary exploit but does not include actual exploit code.

Classification
Writeup 90%
Attack Type
Rce
Complexity
Moderate
Reliability
Theoretical
Target: Rigs of Rods <= 0.33d
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (7)

Core 7
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/26502
Third Party Advisory vdb-entry x_refsource_vupen
http://www.vupen.com/english/advisories/2007/3938
URL Repurposed x_refsource_confirm
http://forum.rigsofrods.com/index.php?topic=3140.0
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/38549
Various Sources x_refsource_misc
http://aluigi.org/poc/rorbof.zip
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/27729

Scores

EPSS 0.0633
EPSS Percentile 92.7%

Details

CWE
CWE-119
Status published
Products (1)
rigs_of_rogs/rigs_of_rogs < 0.33d
Published Nov 20, 2007
Tracked Since Feb 18, 2026