Socket unreacheable in the Lithtech engine (new protocol)

Luigi Auriemma Application: Lithtech engine new network protocol http://www.lithtech.com Games: Contract Jack = 1.1 No one lives forever 2 = 1.3 Tron 2.0 = 1.042 ... others? Platforms: Windows and Mac Bug: socket unreacheable Exploitation: remote, versus server Date: 13 December 2004 Author: Luig...

In-game buffer-overflow in the Gamespy cd-key validation SDK

Luigi Auriemma Application: Gamespy cd-key validation SDK http://www.gamespy.net Versions: before 20 November 2004 Games: due to the implementation of this SDK is hard to test and list all the vulnerable games, however the following is the official list of games that use the various Gamespy SDKs ...

Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2

Luigi Auriemma Application: Battlefield 1942 and Vietnam http://www.battlefield1942.com Versions: Battlefield 1942 = 1.6.19 Battlefield Vietnam = 1.2 Platforms: Windows and Mac Bug: client crash Exploitation: remote, versus clients broadcast Date: 07 December 2004 Author: Luigi Auriemma e-mail:...

Battlefield 1942 1.6.19 + Vietnam 1.2 - Broadcast Client Crash

/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...

Buffer-overflow in Orbz 2.10

Luigi Auriemma Application: Orbz http://www.21-6.com/orbz.asp Versions: = 2.10 Platforms: Windows, Linux and Mac Bug: buffer-overflow Exploitation: remote, versus server Date: 29 November 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introduction 2...

Orbz Game <= 2.10 Remote Buffer Overflow Exploit

No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h include time.h / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probabl...

[Full-Disclosure] Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004)

Luigi Auriemma Application: Serious engine http://www.seriousengine.com Games: all the games based on this engine and using the UDP protocol: - Alpha Black Zero - Nitro family - Serious Sam Second Encounter 1.07 Platforms: Windows, Linux and Mac Bug: crash Exploitation: remote, versus server Date...

Orbz Game <= 2.10 Remote Buffer Overflow Exploit

Exploit for unknown platform in category dos / poc ================================================ Orbz Game include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: email protected web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295...

Orbz Game 2.10 - Remote Buffer Overflow (PoC)

Orbz Game 2.10 - Remote Buffer Overflow PoC / by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit...

Orbz Game 2.10 - Remote Buffer Overflow (PoC)

/ by Luigi Auriemma / include include include include / Read/Write bits to buffer 0.1.1 by Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org max 32 bits numbers supported from 0 to 4294967295. Probably not the fastest bit packing functions existent, but I like them. /...

CVE-2004-0290

Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large 1 battle type and 2 map name fields...

CVE-2004-0278

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

Gearbox Software Halo Game 1.x - Client Remote Denial of Service

Gearbox Software Halo Game 1.x - Client Remote Denial of Service source: https://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply fro...

Gearbox Software Halo Game 1.x - Client Remote Denial of Service

source: https://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply from a server may crash the affected client. A remote attacker may...

Multiple vulnerabilities in Hired Team: Trial &#40;Shine engine&#41;

Luigi Auriemma Application: Hired Team: Trial http://eng.nmg.ru/rubrs.asp?rubrid=165 and probably also the Shine engine on which it is based http://www.3dengine.ru/index.asp?id=4 Versions: Hired Team = 2.0 / 2.200 since this is the only game based on the Shine engine and I have received no reply...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities // source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

// source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be supplied directly to vulnerable functions from external data. A denial-of-service...

Monolith Games - Local Buffer Overflow (PoC)

Monolith Games - Local Buffer Overflow PoC / by Luigi Auriemma / include include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1.1" define PORT 27888 define TIMEOUT 3 define BUFFSZ 2048 defi...

In-game format string in Judge Dredd vs. Death 1.01

Luigi Auriemma Application: Judge Dredd: Dredd vs. Death http://www.dreddvsdeath.com Versions: = 1.01 Platforms: Windows Bug: format string Exploitation: remote, versus server in-game Date: 02 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Debian DSA-432-1 : crawl - buffer overflow

Steve Kemp from the Debian Security Audit Project discovered a problem in crawl, another console based dungeon exploration game, in the vein of nethack and rogue. The program uses several environment variables as inputs but doesn't apply a size check before copying one of them into a fixed size...