----------------------------------------------------------------------


Looking for a job?


Secunia is hiring skilled researchers and talented developers.


http://secunia.com/company/jobs/


----------------------------------------------------------------------

TITLE:
Aliens vs. Predator Denial of Service Vulnerabilities

SECUNIA ADVISORY ID:
SA39769

VERIFY ADVISORY:
http://secunia.com/advisories/39769/

DESCRIPTION:
Luigi Auriemma has reported some vulnerabilities in Aliens vs.
Predator, which can be exploited by malicious people to cause a DoS
(Denial of Service).

1) An error when processing 0x66 packets can be exploited to trigger
a read from out-of-bounds memory and crash an affected server.

2) An error when processing 0x66 packets can be exploited to request
the allocation of an overly large buffer and terminate an affected
server.

3) An error when processing 0x66 packets having an insufficient size
can be exploited to trigger a NULL-pointer dereference and crash an
affected server.

4) An error when processing 0x0C packets having an insufficient size
can be exploited to trigger a NULL-pointer dereference and crash an
affected server.

5) An error when processing 0x0C packets can be exploited to trigger
a read from out-of-bounds memory and crash an affected server.

SOLUTION:
Host games in trusted networks only.

PROVIDED AND/OR DISCOVERED BY:
Luigi Auriemma

ORIGINAL ADVISORY:
http://aluigi.altervista.org/adv/avp3dos-adv.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
private users keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------