Secunia Advisory: SA13368

Luigi Auriemma has reported a vulnerability in Battlefield 1942 and Battlefield Vietnam, which can be exploited by malicious people to cause a DoS (Denial of Service).

When a client enters the “Multiplayer” menu, it sends a request to the master server for available servers. Each server then returns a reply containing information about the server.

However, an unspecified error exists in the client within the routine for handling these replies. This can be exploited via a malicious server by returning a specially crafted reply with an extremely high value in the “numplayers” field.

Successful exploitation causes clients to temporarily freeze and then crash.

Solution:
Apply patches.

Battlefield 1942:
Update to version 1.61b.

Battlefield Vietnam:
Update to version 1.21.