Warzone Resurrection Multiple Buffer Overflow Vulnerabilities

Bugtraq ID:	19118
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 24 2006 12:00AM
Updated:	Aug 11 2006 08:15PM
Credit:	Luigi Auriemma discovered these issues.
Vulnerable:	Pumpkin Studios Warzone Resurrection 2.0.3 Pumpkin Studios Warzone Resurrection 127 SVN Gentoo Linux
Not Vulnerable:	Pumpkin Studios Warzone Resurrection 128 SVN

Warzone Resurrection Multiple Buffer Overflow Vulnerabilities

Warzone Resurrection is prone to multiple remote buffer-overflow vulnerabilities.

A remote attacker may exploit these issues to corrupt memory and execute arbitrary code on vulnerable systems. Attack attempts may crash the client or server, depending on which vulnerability is targeted.

Versions prior to 2.0.3 and SVN 127 are affected by these issues.

Warzone Resurrection Multiple Buffer Overflow Vulnerabilities

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]

Warzone Resurrection Multiple Buffer Overflow Vulnerabilities

Solution:
The vendor has addressed this issue in the latest SVN release. Please contact the vendor for details on obtaining the appropriate updates.

Please see the reference section for information on security updates.

Warzone Resurrection Multiple Buffer Overflow Vulnerabilities

References:

• Warcraft Resurrection Homepage (Warzone Resurrection)
  
• Buffer-overflow in recvTextMessage and NETrecvFile in Warzone Resurrection 2.0.3 (Luigi Auriemma )