CVE-2004-0278

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service CPU consumption via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data...

CVE-2004-0290

Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large 1 battle type and 2 map name fields...

Gearbox Software Halo Game 1.x - Client Remote Denial of Service

source: https://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply from a server may crash the affected client. A remote attacker may...

Gearbox Software Halo Game 1.x - Client Remote Denial of Service

Gearbox Software Halo Game 1.x - Client Remote Denial of Service source: https://www.securityfocus.com/bid/11724/info The Halo game client is reported prone to a remote denial of service vulnerability. It is reported that when using the in game browser to view a server list, a malicious reply fro...

Multiple vulnerabilities in Hired Team: Trial (Shine engine)

Luigi Auriemma Application: Hired Team: Trial http://eng.nmg.ru/rubrs.asp?rubrid=165 and probably also the Shine engine on which it is based http://www.3dengine.ru/index.asp?id=4 Versions: Hired Team = 2.0 / 2.200 since this is the only game based on the Shine engine and I have received no reply...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

// source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be supplied directly to vulnerable functions from external data. A denial-of-service...

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

Monolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities // source: https://www.securityfocus.com/bid/11610/info Lithtech game engine is prone to multiple remote format-string vulnerabilities because of incorrect usage of 'printf'-type functions. Format specifiers can be...

Monolith Games - Local Buffer Overflow (PoC)

Monolith Games - Local Buffer Overflow PoC / by Luigi Auriemma / include include include include ifdef WIN32 include include "winerr.h" define close closesocket else include include include include include include endif define VER "0.1.1" define PORT 27888 define TIMEOUT 3 define BUFFSZ 2048 defi...

In-game format string in Judge Dredd vs. Death 1.01

Luigi Auriemma Application: Judge Dredd: Dredd vs. Death http://www.dreddvsdeath.com Versions: = 1.01 Platforms: Windows Bug: format string Exploitation: remote, versus server in-game Date: 02 October 2004 Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1...

Debian DSA-166-1 : purity - buffer overflows

Two buffer overflows have been discovered in purity, a game for nerds and hackers, which is installed setgid games on a Debian system. This problem could be exploited to gain unauthorized access to the group games. A malicious user could alter the highscore of several games. %NASLMINLEVEL 70300 C...

Debian DSA-432-1 : crawl - buffer overflow

Steve Kemp from the Debian Security Audit Project discovered a problem in crawl, another console based dungeon exploration game, in the vein of nethack and rogue. The program uses several environment variables as inputs but doesn't apply a size check before copying one of them into a fixed size...

Debian DSA-398-1 : conquest - buffer overflow

Steve Kemp discovered a buffer overflow in the environment variable handling of conquest, a curses based, real-time, multi-player space warfare game, which could lead a local attacker to gain unauthorised access to the group conquest. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

Impressions Games Lords of the Realm III - Nickname Remote Denial of Service

// source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server. The problem is in the handling of nicknames of excessive length. I...

Gearbox Software Halo Combat Evolved 1.x - Game Server Remote Denial of Service

Gearbox Software Halo Combat Evolved 1.x - Game Server Remote Denial of Service source: https://www.securityfocus.com/bid/11147/info The Halo Combat Evolved game server is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to deny service...

Gearbox Software Halo Combat Evolved 1.x - Game Server Remote Denial of Service

source: https://www.securityfocus.com/bid/11147/info The Halo Combat Evolved game server is reported prone to a remote denial of service vulnerability. A remote attacker may exploit this vulnerability to deny service for legitimate game players. Patches are available to address the issue...

GLSA-200407-14 : Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries

The remote host is affected by the vulnerability described in GLSA-200407-14 Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol, this query is used to ask if the game server ...

Policy - America's Army Game Client Detection

Binary data 1191.prm...

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow PoC source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack...

aGSM 2.35 Half-Life Server - Info Response Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/10989/info aGSM is reported prone to a remote buffer overflow vulnerability. The issue presents itself in the aGSM server information parsing routines for Half-Life game servers. Due to a lack of sufficient bounds checking performed on the hostname...

Unreal Tournament 2003/2004: Buffer overflow in 'secure' queries

Background Unreal Tournament 2003 and 2004 are popular first-person-shooter games. They are both based on the Unreal engine, and can be used in a game server / client setup. Description The Unreal-based game servers support a specific type of query called 'secure'. Part of the Gamespy protocol,...