The decode_stringmap function in server_transport.cpp for UFO2000 svn 1057 allows remote attackers to cause a denial of service (daemon termination) via a large keysize or valsize, which causes a crash when the resize function cannot allocate sufficient memory.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Ufo2000 | Ufo2000 | * | svn_1057 (including) |