CVE-2007-4535

CVE-2007-4535 affects Vavoom 1.24 and earlier. The vulnerability resides in the VStr::Resize function (str.cpp) under UDP handling, where a string with a negative NewLen value can trigger an assertion error, allowing remote attackers to cause a daemon crash (denial of service). Fedora advisories ...

CVE-2007-4534

CVE-2007-4534 affects Vavoom 1.24 and earlier, where a buffer overflow in VThinker::BroadcastPrintf (p_thinker.cpp) allows remote code execution via overly long strings in chat messages or a long name field. The vulnerability is documented in the NVD entry for CVE-2007-4534 (base score 7.5, HIGH,...

CVE-2007-4535

The VStr::Resize function in str.cpp in Vavoom 1.24 and earlier allows remote attackers to cause a denial of service daemon crash via a string with a negative NewLen value within a certain UDP packet that triggers an assertion error...

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...

Vavoom 1.24 - p_thinker.cpp VThinker::BroadcastPrintf Multiple Remote Overflows

Vavoom 1.24 - pthinker.cpp VThinker::BroadcastPrintf Multiple Remote Overflows source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit...

Vavoom 1.24 - sv_main.cpp Say Command Remote Format String

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can...

Vavoom 1.24 - sv_main.cpp Say Command Remote Format String

Vavoom 1.24 - svmain.cpp Say Command Remote Format String source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execu...

Vavoom 1.24 - 'p_thinker.cpp VThinker::BroadcastPrintf' Multiple Remote Overflows

source: https://www.securityfocus.com/bid/25436/info Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue. An attacker can exploit these issues to execute arbitrary code within the context of the affected...

Code injection

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service infinite loop via 1 a packet with no data or 2 a large packet, which prevents Vavoom from discarding the packet from the socket...

CVE-2006-1409

Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service application crash via an invalid comprLength value in a compressed packet...

Buffer overflow

Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service application crash via an invalid comprLength value in a compressed packet...

CVE-2006-1408

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service infinite loop via 1 a packet with no data or 2 a large packet, which prevents Vavoom from discarding the packet from the socket...

CVE-2006-1409

Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service application crash via an invalid comprLength value in a compressed packet...

CVE-2006-1408

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service infinite loop via 1 a packet with no data or 2 a large packet, which prevents Vavoom from discarding the packet from the socket...

CVE-2006-1408

CVE-2006-1408 affects Vavoom 1.19.1 and earlier. A remote attacker can cause a denial of service (infinite loop) by sending either a packet with no data or a large packet, which prevents Vavoom from discarding the packet from the socket. The connected documents confirm the same description across...

CVE-2006-1409

Vulnerability detail (CVE-2006-1409): Buffer overflow in Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (application crash) via an invalid comprLength value in a compressed packet. Connected sources confirm the affected product and root cause but do not provide exp...

Socket unreachable and decompression buffer-overflow in Vavoom 1.19.1

Luigi Auriemma Application: Vavoom http://www.vavoom-engine.com Versions: = 1.19.1 Platforms: Windows, DOS, nix, BSD and more Bugs: A socket unreachable B decompression crash Exploitation: remote, versus server and client Date: 26 Mar 2006 Author: Luigi Auriemma e-mail: [email protected] web:...

Vavoom 1.19.1 - Multiple VulnerabilitiesDenial of Service

Vavoom 1.19.1 - Multiple VulnerabilitiesDenial of Service / by Luigi Auriemma / include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid...

Vavoom 1.19.1 - Multiple Vulnerabilities/Denial of Service

/ by Luigi Auriemma / include include include include include ifdef WIN32 include / Header file used for manage errors in Windows It support socket and errno too this header replace the previous sockerrX.h / include include void stderrvoid char error; switchWSAGetLastError case 10004: error =...