exploits , vulnerabilities , articles , Gamespy Software Development Kit CD-Key Validation Buffer Overflow Vulnerability

Title	Gamespy Software Development Kit CD-Key Validation Buffer Overflow Vulnerability
Published	2004-12-10-12:00AM
Updated	2004-12-10-10:06PM
Class	Boundary Condition Error
CVE	CVE-MAP-NOMATCH
Remote	Yes
Local	No
Credit	Luigi Auriemma <aluigi@autistici.org> disclosed this vulnerability.
Vulnerable	GameSpy Software Development Kit 4D Rulers Gore Activision Starfleet Command III Atari Terminator 3: War Of The Machines Brat Designs Breed Digital Reality Haegemonia 1.0 Digital Reality Haegemonia 1.0.4 Digital Reality Haegemonia 1.0.5 Digital Reality Haegemonia 1.0.7 DreamCatcher Gore Ultimate Soldier Electronic Arts Inc. Armies of Exigo Electronic Arts Inc. Battlefield 1942 1.2 Electronic Arts Inc. Battlefield 1942 1.3 Electronic Arts Inc. Need For Speed: Hot Pursuit 2 Gearbox Software Halo Combat Evolved 1.2 Gearbox Software Halo Combat Evolved 1.4 Gearbox Software Halo Combat Evolved 1.5 Gearbox Software Halo Combat Evolved 1.6 Gearbox Software Halo Combat Evolved 1.31 Global Star Software Hidden & Dangerous 2 Illusion Softworks Hidden & Dangerous 2 LucasArts Star Wars Battlefront 1.11 LucasArts Start Wars Republic Commando Microsoft Halo Combat Evolved Monolith Productions Tron 2.0 1.0 Pan Vision I.G.I2 Covert Strike 1.0 Pan Vision I.G.I2 Covert Strike 1.1 Pan Vision I.G.I2 Covert Strike 1.2 Pan Vision I.G.I2 Covert Strike 1.3 People can Fly Painkiller 1.3.1 Sierra Entertainment Contract Jack 1.0 Sierra Entertainment Contract Jack 1.1 Sierra Entertainment Men of Valor Sierra Entertainment Tribes: Vengeance TimeGate Studios Axis & Allies TimeGate Studios Kohan II Vivendi Universal Judge Dredd: Dredd vs. Death
Not Vulnerable
Code	A proof of concept exploit is provided: /data/vulnerabilities/exploits/goregsbof.zip
TXT

Vulnerabilities - newest 10 RSS | More

2009-12-17 Mozilla Firefox/SeaMonkey GeckoActiveXObject Exception Message COM Object Enumeration Vulnerability
2009-12-16 ZABBIX Denial Of Service and SQL Injection Vulnerabilities
2009-12-16 IBM WebSphere Application Server JNDI Remote Information Disclosure Vulnerability
2009-12-16 Horde Application Framework Administration Interface Cross-Site Scripting Vulnerability
2009-12-16 Mozilla Firefox and SeaMonkey MFSA 2009-65 through -71 Multiple Vulnerabilities
2009-12-16 Merkaartor Insecure Temporary File Creation Vulnerability
2009-12-15 TYPO3 Watchdog (aba_watchdog) Unspecified Information Disclosure Vulnerability
2009-12-15 PostgreSQL Index Function Session State Modification Local Privilege Escalation Vulnerability
2009-12-15 PostgreSQL NULL Character CA SSL Certificate Validation Security Bypass Vulnerability
2009-12-15 IBM DB2 prior to 9.5 Fix Pack 5 Multiple Unspecified Security Vulnerabilities