|
F.E.A.R. Lithtech Engine Denial of Service and Format String Vulnerabilities
|
|
Secunia Advisory:
|
SA17317
|
|
|
Release Date:
|
2005-10-24
|
|
Last Update:
|
2007-10-08
|
|
Popularity:
|
6,132 views
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| Software: | F.E.A.R. (First Encounter Assault and Recon) 1.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2004-1395
CVE-2004-1500
CVE-2007-5247
|
|
Description:
Luigi Auriemma has reported two vulnerabilities in F.E.A.R. (First Encounter Assault and Recon), which can be exploited by malicious people to cause a DoS (Denial of Service), and potentially to compromise a vulnerable system.
1) Some format string errors in the processing of messages and nicknames can potentially be exploited to compromise a vulnerable system.
For more information:
SA13116
Successful exploitation may allow execution of arbitrary code, but requires that the "Punkbuster" feature is enabled on the affected server for versions above 1.02.
The vulnerability is reported in version 1.08 and prior. Other versions may also be affected.
2) An error in the communication handling can be exploited to cause a DoS.
For more information:
SA13446
The vulnerability is reported in the retail version and in version 1.01 patch. Version 1.02 is reportedly still vulnerable when handling UDP packets larger than 8192 bytes.
Solution:
Host games on a trusted network only.
Provided and/or discovered by:
Luigi Auriemma
Changelog:
2005-11-15: Added information about additional vulnerability. Updated "Critical", "Impact", "Description" and "Other References" sections.
2007-10-02: Added additional information and affected versions to vulnerability #1.
2007-10-08: Added CVE reference.
Original Advisory:
1) http://aluigi.altervista.org/adv/fearfspb-adv.txt
2) http://lists.grok.org.uk/pipermail/full-disclosure/2005-October/038095.html
Other References:
SA13116:
http://secunia.com/advisories/13116/
SA13446:
http://secunia.com/advisories/13446/
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
