Secunia

Luigi Auriemma has reported a vulnerability in Battlefield 1942 and Battlefield Vietnam, which can be exploited by malicious people to cause a DoS (Denial of Service).

When a client enters the "Multiplayer" menu, it sends a request to the master server for available servers. Each server then returns a reply containing information about the server.

However, an unspecified error exists in the client within the routine for handling these replies. This can be exploited via a malicious server by returning a specially crafted reply with an extremely high value in the "numplayers" field.

Successful exploitation causes clients to temporarily freeze and then crash.

Solution
Apply patches.
Further details available in Customer Area

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
EA Games:
http://www.eagames.com/official/battlefield/1942/us/editorial/community_message_51.jsp
http://www.eagames.com/official/battlefield/vietnam/us/editorial.jsp?src=community_update_28

Luigi Auriemma:
http://aluigi.altervista.org/adv/bfcboom-adv.txt

Deep Links
Links available in Customer Area