Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Desert_siege | Redstorm | * | * |
| Ghost_recon | Redstorm | 1.4 (including) | 1.4 (including) |
| The_sum_of_all_fears | Redstorm | 1.1.1.0 (including) | 1.1.1.0 (including) |
References
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305