Categorie: Vulnerability Posted: 2004-02-17 by ReCall Views: 396 Source: Click here
Current Rating: Not rated
Details
Description: A buffer overflow vulnerability was reported in the Purge and Purge Jihad games. A remote game server can execute arbitrary code on a connected client system.
Luigi Auriemma reported that when a client sends a broadcast query to available game servers, a game server can respond with a specially crafted packet to trigger a buffer overflow and execute arbitrary code on the client system.
The 'battle type' and 'map name' fields are reportedly limited to 64 bytes but can be overflowed.
