Null pointer dereference

2009-04-1022:00:00

PRIOn knowledge base

www.prio-n.com

7.1 High

AI Score

Confidence

High

0.225 Low

EPSS

Percentile

96.5%

JSON

World in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service (access violation and crash) via a zero-byte data block to TCP port 48000, which triggers a NULL pointer dereference.

CPENameOperatorVersion
wiceq1.003
wiceq1.005
wiceq1.002
wicle1.008
wiceq1.000
wiceq1.007
wiceq1.001
wiceq1.006

Name	Operator	Version
wic	eq	1.003
wic	eq	1.005
wic	eq	1.002
wic	le	1.008
wic	eq	1.000
wic	eq	1.007
wic	eq	1.001
wic	eq	1.006

References

aluigi.altervista.org/adv/wicboom-adv.txt

osvdb.org/46533

secunia.com/advisories/30817

www.securityfocus.com/archive/1/493596/100/0/threaded

www.securityfocus.com/bid/29888

www.vupen.com/english/advisories/2008/1901/references

exchange.xforce.ibmcloud.com/vulnerabilities/43289