CNNVD-202507-2277 Information
CNNVD ID
CNNVD-202507-2277
Related CVE
- CNNVD Published: 2025-07-16
Description (Chinese)
Ubisoft Entertainment Heroes of Might and Magic III Complete等都是法国Ubisoft Entertainment公司的一款回合制策略魔幻游戏。 Ubisoft Entertainment多款产品存在安全漏洞，该漏洞源于缓冲区溢出，可能导致执行任意代码。以下产品及版本受到影响：Heroes of Might and Magic III Complete 4.0.0.0版本、HD Mod 3.808 build 9版本和Demo 1.0.0.0版本。
Description (English)
The Ubisoft Enterprise Heroes of Light and Magic III Complete are all one-round game of strategic magic for Ubisoft Enterprise in France. There is a security loophole in the Ubisoft Enterprise ’ s multiple products, which originates from the spilling out of the buffer zone and may lead to the implementation of any code. The following products and versions were affected: Heroes of Light and Magic III Version 4.0.0, HD Mod 3.808 Build 9 and Demo 1.0.0.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
UBtech
Published
2025-07-16
Last Modified
2026-02-24
References
https://raw.githubusercontent.com/rapid7/metasploit-framework/master/modules/exploits/windows/fileformat/homm3_h3m.rb https://www.exploit-db.com/exploits/37716 https://www.vulncheck.com/advisories/heroes-of-might-and-magic-iii-map-file-buffer-overflow
Share on: