Design/Logic Flaw

2008-08-0618:41:00

PRIOn knowledge base

www.prio-n.com

7.2 High

AI Score

Confidence

High

0.017 Low

EPSS

Percentile

87.9%

JSON

America’s Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICE_MAX_CHATTERS.

CPENameOperatorVersion
america\\'s_armyeq2.5.0
america\\'s_armyeq1.0.1 b
america\\'s_armyeq1.4.0
america\\'s_armyeq1.2.1
america\\'s_armyeq2.4.0
america\\'s_armyeq2.1.0
america\\'s_armyeq1.7.0
america\\'s_armyeq1.9.0
america\\'s_armyeq2.8.0
america\\'s_armyeq2.0.0

Name	Operator	Version
america\\'s_army	eq	2.5.0
america\\'s_army	eq	1.0.1 b
america\\'s_army	eq	1.4.0
america\\'s_army	eq	1.2.1
america\\'s_army	eq	2.4.0
america\\'s_army	eq	2.1.0
america\\'s_army	eq	1.7.0
america\\'s_army	eq	1.9.0
america\\'s_army	eq	2.8.0
america\\'s_army	eq	2.0.0

Rows per page:

1-10 of 261

References

aluigi.altervista.org/adv/armynchia-adv.txt

aluigi.org/poc/armynchia.zip

secunia.com/advisories/31353

www.securityfocus.com/archive/1/495061/100/0/threaded

www.securityfocus.com/bid/30519

exchange.xforce.ibmcloud.com/vulnerabilities/44152