RedStorm Ghost Recon Game Engine Remote Denial Of Service Vulnerability

Bugtraq ID:	9738
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Feb 24 2004 12:00AM
Updated:	Feb 24 2004 12:00AM
Credit:	Discovery of this vulnerability has been credited to Luigi Auriemma <[email protected]>.
Vulnerable:	RedStorm Ghost Recon Game Engine + RedStorm Desert Siege + RedStorm Ghost Recon 1.4 + RedStorm The Sum of all Fears 1.1.1 .0
Not Vulnerable:

RedStorm Ghost Recon Game Engine Remote Denial Of Service Vulnerability

The Ghost Recon Game Engine has been reported prone to a denial of service vulnerability. When handling text strings, the Ghost Recon Game Engine employs a 32-bit integer string size prefix in order to monitor the size of the string. It has been reported that when an invalid size value is supplied an exception will be triggered causing a system wide denial of service.

RedStorm Ghost Recon Game Engine Remote Denial Of Service Vulnerability

The following proof of concept has been supplied:

• /data/vulnerabilities/exploits/grboom.rar

RedStorm Ghost Recon Game Engine Remote Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

RedStorm Ghost Recon Game Engine Remote Denial Of Service Vulnerability

References:

• Remote crash in Ghost Recon engine (Luigi Auriemma )