Secunia

Luigi Auriemma has reported a vulnerability in Soldier of Fortune II, which can be exploited by malicious users to cause a DoS (Denial of Service).

The vulnerability is caused due to an error when processing the "/ignore" command with a client ID that is larger than 1024. This causes a memory read error when the server tries to read beyond an array of 1024 entries.

Successful exploitation crashes the service, but requires access to a game on the server.

The vulnerability has been reported in versions 1.02x and 1.03. Other versions may also be affected.

Solution
Grant only trusted users access to games on vulnerable game servers.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/sof2ignore-adv.txt

Deep Links
Links available in Customer Area