EA Battlefield 2 and Battlefield 2142 Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	40605
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jun 07 2010 12:00AM
Updated:	Jun 07 2010 12:00AM
Credit:	Francis Lavoie-Renaud, Luigi Auriemma
Vulnerable:	Electronic Arts Inc. Battlefield 2142 1.50 Electronic Arts Inc. Battlefield 2 1.41
Not Vulnerable:

EA Battlefield 2 and Battlefield 2142 Multiple Denial Of Service Vulnerabilities

Battlefield 2 and Battlefield 2142 are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle specially crafted network packets.

An attacker can exploit these issues to cause the applications to become unresponsive or to crash the affected game servers, denying service to legitimate users.

Battlefield 2 1.41 and Battlefield 2142 1.50 are vulnerable; other versions may also be affected.

EA Battlefield 2 and Battlefield 2142 Multiple Denial Of Service Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/40605.zip

EA Battlefield 2 and Battlefield 2142 Multiple Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

EA Battlefield 2 and Battlefield 2142 Multiple Denial Of Service Vulnerabilities

References:

• Application: Refractor 2 engine (Luigi Auriemma)
  
• Battlefield 2 Crash (Francis)
  
• Battlefield 2 Homepage (Electronic Arts)
  
• Battlefield 2/2142 1.4*/1.5* bfloop fix 0.2 (Windows) (Luigi Auriemma)
  
• Battlefield 2142 Homepage (Electronic Arts)