Luigi Auriemma has reported a vulnerability in various The Lord of the Rings games, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing the Gamespy "NATHOST" and "NATINITED" commands.

For more information:
SA40459

The vulnerability is reported in the following games an versions:
The Lord of the Rings: Battle for Middle-Earth version 1.03
The Lord of the Rings: Battle for Middle-Earth 2 version 1.06
The Lord of the Rings: Battle for Middle-Earth 2 The Rise of the Witch-king version 2.01

Other games and versions may also be affected.

Solution
Do not play or host online games. Do not join the peerchat server.

Provided and/or discovered by
Luigi Auriemma

Original Advisory
http://aluigi.altervista.org/adv/eagsbof-adv.txt

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area