661 matches found
Multiple medium risk flaws fixed in new version of PHP (late advisory)
David Litchfield of NGSSoftware has discovered multiple medium risk vulnerabilities in PHP. Versions affected include PHP 5.0.3 PHP 4.3.10 PHP has released updated versions of the software available here: http://www.php.net/downloads.php Whilst PHP is opensource, NGSSoftware will abide by our...
In-game players kicking in the Quake 3 engine
Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Vulnerables: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Wars Jedi Knight II: Jedi Outcast = 1.0...
CVE-2004-1492
CVE-2004-1492 concerns the game Master of Orion III (versions up to 1.2.5 and earlier). The vulnerability arises in how the game processes an incoming data packet that contains a large size specifier, triggering a large memory allocation that can fail and cause a remote denial of service (the gam...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier is affected. The issue allows remote attackers to cause a denial of service (server crash) via multiple connections using long nicknames, possibly triggering a buffer overflow. Root cause isn’t explicitly detailed in the provided documents beyond this descrip...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...
CVE-2004-2165
Lords of the Realm III 1.01 and earlier, when in the lobby stage, allows remote attackers to cause a denial of service crash from unallocated memory write via a long user nickname...
CVE-2004-1493
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service server crash via multiple connections with long nicknames, possibly triggering a buffer overflow...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
Medium Risk Vulnerability in WinRAR
Peter Winter-Smith of NGSSoftware has discovered a medium risk vulnerability within the 'Repair Archive' feature in WinRAR. WinRAR versions 3.40 and older are vulnerable to this issue. This vulnerability has now been fixed by RARLabs in WinRAR version 3.41, and a fix can be downloaded from the...
Crashs in Master of Orion III 1.2.5
Luigi Auriemma Application: Master of Orion III http://moo3.quicksilver.com Versions: = 1.2.5 Platforms: Windows and MacOS Bugs: - allocation error - big nicknames crash Exploitation: remote, versus server Date: 27 October 2004 Author: Luigi Auriemma e-mail: [email protected] web:...
Master of Orion III 1.2.5 - Denial of Service
Master of Orion III 1.2.5 - Denial of Service / by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error;...
Quicksilver Master of Orion III 1.2.5 - Multiple Remote Denial of Service Vulnerabilities
source: https://www.securityfocus.com/bid/11550/info Master of Orion III is reported prone to multiple remote denial of service vulnerabilities. These issues occur because the application does not handle exceptional conditions in a proper manner. Master of Orion III 1.2.5 and prior versions are...
Master of Orion III <= 1.2.5 Denial of Service Exploit
Exploit for unknown platform in category dos / poc ====================================================== Master of Orion III include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include...
Master of Orion III <= 1.2.5 Denial of Service Exploit
No description provided by source. / by Luigi Auriemma / include stdio.h include stdlib.h include string.h ifdef WIN32 include winsock.h / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include string.h include errno.h...
Master of Orion III 1.2.5 - Denial of Service
/ by Luigi Auriemma / include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error = "Interrupted system...
MSN Gaming Heartbeat Component Buffer Overflow
John Heasman of NGSSoftware has discovered a high risk vulnerability in the Heartbeat component used on MSN related gaming sites. This vulnerability has now been fixed by Microsoft, and a fix can be downloaded from the Microsoft Security website:...
Microsoft Internet Explorer Install Engine Control Buffer Overflow
Peter Winter-Smith of NGSSoftware has discovered a high risk vulnerability in the Microsoft Internet Explorer Install Engine control. Versions of Internet Explorer which are affected include: Microsoft Internet Explorer 5.x Microsoft Internet Explorer 6.x This vulnerability has now been fixed by...
Impressions Games Lords of the Realm III - Nickname Remote Denial of Service
Impressions Games Lords of the Realm III - Nickname Remote Denial of Service // source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the ga...
Impressions Games Lords of the Realm III - Nickname Remote Denial of Service
// source: https://www.securityfocus.com/bid/11223/info A problem in the handling of nicknames is reported in the Lords of the Realm III server. Because of this, an attacker may be able to deny service to users of the game server. The problem is in the handling of nicknames of excessive length. I...