Roger Wilco 1.4.1.6 and earlier or Roger Wilco Base Station 0.30a and earlier allows remote attackers to cause a denial of service (application crash) via a long, malformed UDP datagram.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Roger_wilco_dedicated_server | Gamespy | 0.26 (including) | 0.26 (including) |
| Roger_wilco_dedicated_server | Gamespy | 0.27 (including) | 0.27 (including) |
| Roger_wilco_dedicated_server | Gamespy | 0.28 (including) | 0.28 (including) |
| Roger_wilco_dedicated_server | Gamespy | 0.29 (including) | 0.29 (including) |
| Roger_wilco_dedicated_server | Gamespy | 0.30a (including) | 0.30a (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.1 (including) | 1.4.1.1 (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.2 (including) | 1.4.1.2 (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.3 (including) | 1.4.1.3 (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.4 (including) | 1.4.1.4 (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.5 (including) | 1.4.1.5 (including) |
| Roger_wilco_graphical_server | Gamespy | 1.4.1.6 (including) | 1.4.1.6 (including) |
References
- http://aluigi.altervista.org/adv/wilco-again-adv.txt
- http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html
- http://secunia.com/advisories/11270
- http://www.osvdb.org/4833
- http://www.securityfocus.com/bid/10022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15716
- http://aluigi.altervista.org/adv/wilco-again-adv.txt
- http://archives.neohapsis.com/archives/bugtraq/2004-03/0352.html
- http://secunia.com/advisories/11270
- http://www.osvdb.org/4833
- http://www.securityfocus.com/bid/10022
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15716