The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a keysize or valsize that is inconsistent with the packet size, which leads to a buffer over-read.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Ufo2000 | Ufo2000 | * | svn_1057 (including) |