Luigi Auriemma has reported two vulnerabilities in Mtp Target, which can be exploited to malicious people to cause a DoS (Denial of Service) or compromise a user's system.

1) A format string error in the client code when displaying messages from other users can be exploited to execute arbitrary code on a user's system by sending a specially crafted message containing format specifiers.

2) A signedness error in the server code can be exploited by a client to crash the game via a specially crafted parameter.

Solution
Host and play games on trusted networks only.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/mtpbugs-adv.txt

Deep Links
Links available in Customer Area