Soldier of Fortune II Buffer Overflow Vulnerability
- 0
- Add a Comment
- No Related Post
Critical: Moderately critical Impact: DoS Where: From remote Solution Status: Unpatched Software: Soldier of Fortune II 1.x
Luigi Auriemma has reported a vulnerability in Soldier of Fortune II, which can be exploited by malicious people to cause a DoS (Denial of Service).
The vulnerability is caused due to some boundary errors in the communication handling and can be exploited by sending an overly long query or response to a vulnerable game server or client e.g. browsing the online server list.
Successful exploitation crashes a vulnerable server or client, but can reportedly not be exploited for execution of arbitrary code.
The vulnerability has been reported in version 1.03 gold. Other versions may also be affected.
Solution:
Servers: Grant only trusted clients access to games.Clients: Connect to trusted servers only and don’t use the online server list.