Gearbox Software Halo Game Server Infinite Loop Denial of Service Vulnerability

Bugtraq ID:	13728
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2005-1741
Remote:	Yes
Local:	No
Published:	May 24 2005 12:00AM
Updated:	Jun 30 2008 11:52PM
Credit:	Discovered by Luigi Auriemma <[email protected]>.
Vulnerable:	Gearbox Software Halo Combat Evolved 1.07 Gearbox Software Halo Combat Evolved 1.06
Not Vulnerable:

Gearbox Software Halo Game Server Infinite Loop Denial of Service Vulnerability

The Halo Game Server is prone to a denial-of-service condition. The issue arises when malformed data is sent to the game server, causing it to enter an infinite loop.

This issue was reported to affect Halo Game Server 1.06; earlier versions are likely vulnerable.

UPDATE: The vulnerability also affects Halo Game Server 1.07.

Gearbox Software Halo Game Server Infinite Loop Denial of Service Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/13728.zip
• /data/vulnerabilities/exploits/haloloop.zip

Gearbox Software Halo Game Server Infinite Loop Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Gearbox Software Halo Game Server Infinite Loop Denial of Service Vulnerability

References:

• Halo Combat Evolved For Windows (Microsoft)
  
• Endless loop in Halo 1.06 (Luigi Auriemma )
  
• Endless loop in Halo 1.07 (Luigi Auriemma )
  
• Halo: Combat Evolved <= 1.07 (Luigi Auriemma)