Multiple Tripwire Interactive Games 'STEAMCLIENTBLOB' Multiple Denial Of Service Vulnerabilities

Bugtraq ID:	41361
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 05 2010 12:00AM
Updated:	Jul 05 2010 12:00AM
Credit:	Luigi Auriemma
Vulnerable:	Tripwire Interactive Red Orchestra 0 Tripwire Interactive Killing Floor 0 Mare Nostrum Mare Nostrum 0 Darklight Games Darkest Hour: Europe '44-'45 0
Not Vulnerable:

Multiple Tripwire Interactive Games 'STEAMCLIENTBLOB' Multiple Denial Of Service Vulnerabilities

Multiple Tripwire Interactive games are prone to multiple remote denial-of-service vulnerabilities because the applications fail to properly handle specially crafted network packets.

An attacker can exploit these issues to cause the applications to become unresponsive or to crash the affected game servers, denying service to legitimate users.

The following games are vulnerable:

Killing Floor
Red Orchestra
Darkest Hour: Europe '44-'45
Mare Nostrum

Multiple Tripwire Interactive Games 'STEAMCLIENTBLOB' Multiple Denial Of Service Vulnerabilities

The following exploit code is available:

• /data/vulnerabilities/exploits/41361.zip

Multiple Tripwire Interactive Games 'STEAMCLIENTBLOB' Multiple Denial Of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Multiple Tripwire Interactive Games 'STEAMCLIENTBLOB' Multiple Denial Of Service Vulnerabilities

References:

• Darkest Hour: Europe '44-'45 - Homepage (Darklight Games)
  
• Killing Floor - Homepage (Tripwire Interactive)
  
• Mare Nostrum - Homepage (Mare Nostrum)
  
• Red Orchestra - Homepage (Tripwire Interactive)
  
• Tripwire Interactive - Homepage (Tripwire Interactive)
  
• Tripwire Interactive games (Luigi Auriemma)