Yager Development Yager Game Data Block Denial Of Service Vulnerability

Bugtraq ID:	13179
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1164 CVE-2005-1165
Remote:	Yes
Local:	No
Published:	Apr 14 2005 12:00AM
Updated:	Jul 12 2009 12:56PM
Credit:	Luigi Auriemma <[email protected]> is credited with the discovery of this issue.
Vulnerable:	Yager Development Yager Game 5.24 Yager Development Yager Game 5.20 Yager Development Yager Game 5.0
Not Vulnerable:

Yager Development Yager Game Data Block Denial Of Service Vulnerability

A remote denial of service vulnerability affects the Yager Development Yager Game. This issue is due to a failure of the application to properly handle exceptional network data.

An attacker may leverage this issue to freeze a multiplayer game that is currently in progress; players will be forced to end their game to return to normal functionality.

Yager Development Yager Game Data Block Denial Of Service Vulnerability

The following proof of concept has been made available:

• /data/vulnerabilities/exploits/yagerbof.zip

Yager Development Yager Game Data Block Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Yager Development Yager Game Data Block Denial Of Service Vulnerability

References:

• Yager Game Home Page (YAGER Development)
  
• Multiple vulnerabilities in Yager 5.24 (Luigi Auriemma )