Secunia

Luigi Auriemma has reported a vulnerability in multiple games, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is caused due to a boundary error within the handling of secure Gamespy queries. This can be exploited to cause a buffer overflow by sending a specially crafted, overly long query to the server.

Successful exploitation may potentially allow execution of arbitrary code on the game server.

The vulnerability has been reported in the following products:
- Alien versus Predator 2, version 1.0.9.6.
- Blood 2, version 2.1.
- No one lives forever, version 1.004.
- Shogo, version 2.2.

Other versions may also be affected.

Solution
Grant only trusted clients access to matches on vulnerable game servers.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/lithsec-adv.txt

Deep Links
Links available in Customer Area