Description
Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Medal of Honor Allied Assault getinfo Stack Buffer Overflow
exploit/windows/games/mohaa_getinfo
Exploit-DB 3
- Medal of Honor Allied Assault - getinfo Stack Buffer Overflow (Metasploit) EDB-16695 · remote · May 9, 2010 · verified
- Medal of Honor Spearhead (Linux) - Server Remote Buffer Overflow EDB-826 · remote · Feb 18, 2005 · verified
- Medal of Honor - Remote Buffer Overflow (PoC) EDB-357 · dos · Jul 20, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20040717 Medal of Honor remote buffer-overflow mailing-list
- 10743 vdb-entry
- medalofhonor-packet-bo(16715) vdb-entry