Call of Duty Server Callvote Map Command Remote Buffer Overflow Vulnerability

Bugtraq ID:	20180
Class:	Boundary Condition Error
CVE:	CVE-2006-5058
Remote:	Yes
Local:	No
Published:	Sep 25 2006 12:00AM
Updated:	Jul 06 2016 01:33PM
Credit:	Luigi Auriemma is credited with discovering this vulnerability.
Vulnerable:	Activision Call of Duty United Offensive 1.41 Activision Call of Duty United Offensive 1.5.1 b Activision Call of Duty United Offensive 1.51 b Activision Call of Duty 4 1.7 Activision Call of Duty 4 1.6 Activision Call of Duty 4 1.5 Activision Call of Duty 2 1.3 Activision Call of Duty 1.5 b Activision Call of Duty 1.4 Activision Call of Duty 1.5.b
Not Vulnerable:

Call of Duty Server Callvote Map Command Remote Buffer Overflow Vulnerability

Call of Duty server is prone to a remote buffer-overflow vulnerability because it fails to properly bounds-check user-supplied input before copying it to an insufficiently sized memory buffer.

Exploiting this issue may allow remote attackers to execute arbitrary machine code in the context of the affected application. Failed exploit attempts will likely cause denial-of-service conditions.

Call of Duty Server Callvote Map Command Remote Buffer Overflow Vulnerability

The following command demonstrates this issue:

/callvote map aaaaaaa...(185_'a's)...aaaaaaa

The following proof of concept is also available.

• /data/vulnerabilities/exploits/20180.zip

Call of Duty Server Callvote Map Command Remote Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Call of Duty Server Callvote Map Command Remote Buffer Overflow Vulnerability

References:

• Activision Homepage (Activision)
  
• Call of Duty Homepage (Activision)
  
• Not verified - Unofficial patch for Call of Duty 2 (Luigi Auriemma)
  
• Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma )
  
• Re: Double Denial of Service in Call of Duty 4 1.6 (Luigi Auriemma )
  
• Call of Duty 4: Modern Warfare (Luigi Auriemma )