Digital Illusions Multiple Games Remote Denial of Service Vulnerability

Bugtraq ID:	11838
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Dec 07 2004 12:00AM
Updated:	Dec 07 2004 12:00AM
Credit:	Discovery is credited to Luigi Auriemma <[email protected]>.
Vulnerable:	Digital Illusions Battlefield Vietnam 1.2 Digital Illusions Battlefield 1942 1.6.19
Not Vulnerable:

Digital Illusions Multiple Games Remote Denial of Service Vulnerability

Battlefield 1942 and Battlefield Vietnam are reported prone to a remote denial of service vulnerability. This issue presents itself in the game clients when handling malformed data from a malicious server.

A remote attacker can cause a denial of service condition in multiple clients by sending a broadcast reply.

This issue affects battlefield 1942 versions 1.6.19 and prior and Battlefield Vietnam versions 1.2 and prior.

Digital Illusions Multiple Games Remote Denial of Service Vulnerability

Exploit code is available:

• /data/vulnerabilities/exploits/bfcboom.tar

Digital Illusions Multiple Games Remote Denial of Service Vulnerability

Solution:
It is reported that this issue has been addresses in Battlefield 1942 1.61b and Battlefield Vietnam 1.21. This information is not confirmed at the moment.

Digital Illusions Multiple Games Remote Denial of Service Vulnerability

References:

• Home Page (Digital Illusions)
  
• Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2 (Luigi Auriemma )