Hidden Gamespy code leads to vulnerabilities in diffused games (BF1942, Halo, Dredd and more)

Luigi Auriemma Application: Gamespy SDK used for online cd-keys validation in third party code hidden "security through obscurity" code Games/ver: Battlefield 1942 = 1.6.19 and 1.6rc1 http://www.battlefield1942.com Contract Jack = 1.1 http://nolf.sierra.com Gore = 1.48 1.49 http://gore.cryogame.c...

Gamespy Software Development Kit - Remote Denial of Service

Gamespy Software Development Kit - Remote Denial of Service source: https://www.securityfocus.com/bid/9741/info It has been reported that the GameSpy SDK is prone to a remote denial of service vulnerability. This issue is due to the software failing to handle exceptional conditions during network...

Gamespy Software Development Kit - Remote Denial of Service

source: https://www.securityfocus.com/bid/9741/info It has been reported that the GameSpy SDK is prone to a remote denial of service vulnerability. This issue is due to the software failing to handle exceptional conditions during network communication. Exploitation of this issue may cause the...

CVE-2003-1354

Multiple GameSpy 3D 2.62 compatible gaming servers generate very large UDP responses to small requests, which allows remote attackers to use the servers as an amplifier in DDoS attacks with spoofed UDP query packets, as demonstrated using Battlefield 1942...

Gamespy 3d buffer overflow

Buffer overflow on IRC server reply parsing...

Gamespy3d <= 263015 lets code execution through long IRC answer

Luigi Auriemma Application: Gamespy 3d http://www.gamespy3d.com Versions: = 263015 Platforms: Windows Bug: Code execution through memory corruption caused by long data from IRC server Risk: Medium Author: Luigi Auriemma e-mail: [email protected] web: http://aluigi.altervista.org 1 Introductio...

Gamespy 3d 2.62/2.63 - IRC Client Remote Buffer Overflow

source: https://www.securityfocus.com/bid/8734/info It has been reported that Gamespy 3D IRC client may be prone to a remote buffer overflow vulnerability due to insufficient boundary checking. The issue is reported to present itself when the client attempts to connect to a remote IRC server...

Gamespy 3d 2.622.63 - IRC Client Remote Buffer Overflow

Gamespy 3d 2.622.63 - IRC Client Remote Buffer Overflow source: https://www.securityfocus.com/bid/8734/info It has been reported that Gamespy 3D IRC client may be prone to a remote buffer overflow vulnerability due to insufficient boundary checking. The issue is reported to present itself when th...

CVE-2003-0650

Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. dot dot sequences in filenames in a .APK Zip file...

CVE-2003-0650

Directory traversal vulnerability in GSAPAK.EXE for GameSpy Arcade, possibly versions before 1.3e, allows remote attackers to overwrite arbitrary files and execute arbitrary code via .. dot dot sequences in filenames in a .APK Zip file...

CVE-2003-0650

The CVE concerns GSAPAK.EXE in GameSpy Arcade (likely affected versions before 1.3e). The issue is a directory traversal vulnerability that allows remote attackers to overwrite arbitrary files and potentially execute arbitrary code via .. sequences in filenames inside a .APK (Zip) file. CVSS v2 m...

GameSpy Arcade Arbitrary File Writing Vulnerability

ThreeZee Technology, Inc. Security Advisory TZT002 Advisory: GameSpy Arcade Arbitrary File Writing Discovered: July 26, 2003 Released: July 31, 2003 Risk: Critical; Allows writing of a file to any location on the victim's system. Author: Mike Kristovich, Security Researcher ThreeZee Technology,...

PivX Multi-Vendor Game Server dDoS Advisory

Mike Kristovich, PivX Security Advisory MK001 Date: November 26, 2002 Released: January 16, 2002 Application: Battlefield 1942 Server and Dedicated Server America's Army Unreal Tournament 2003 and more.. see section 2. Version: All up to current. Bug: Server status port replies to spoofed UDP...

GameSpy 3D 2.62 - Packet Amplification Denial of Service

// source: https://www.securityfocus.com/bid/6636/info A vulnerability has been reported for several games that support the use of the GameSpy network. A game client typically queries a game server using the UDP protocol. It has been reported that a simple query by a client may result in a game...

GameSpy 3D 2.62 - Packet Amplification Denial of Service

GameSpy 3D 2.62 - Packet Amplification Denial of Service // source: https://www.securityfocus.com/bid/6636/info A vulnerability has been reported for several games that support the use of the GameSpy network. A game client typically queries a game server using the UDP protocol. It has been report...