Secunia

Luigi Auriemma has reported some vulnerabilities in Roger Wilco, which can be exploited by malicious people to cause a DoS (Denial of Service) and bypass certain restrictions.

1) A handling error within the audio service can be exploited to crash the service by sending a malformed UDP datagram, which causes the program to read outside its allocated memory.

2) It is possible to transmit audio on an arbitrary channel without joining it first. This allows a person to talk on any channel anonymously (even restricted channels) by sending the audio stream directly to the server or a client inside the channel. Reception is not possible.

It has also been reported that servers disclose both IP addresses and ports of connected clients to a client entering a channel. This can also be used to disclose the server to which a client is connected by attempting to connect to the client.

A couple of other bugs were also reported.

The following versions are reportedly affected:
* Roger Wilco 1.4.1.6 and prior
* Roger Wilco Base Station 0.30a and prior

Solution
Use another product.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/wilco-again-adv.txt

Deep Links
Links available in Customer Area