Description
Battlefield 1942 1.6.19 and earlier, and Battlefield Vietnam 1.2 and earlier, allows a remote master server to cause a denial of service (client crash) via a server reply that contains a large numplayers value, which triggers a null dereference.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Exploit-DB 2
- Battlefield (BFCC < 1.22_A /BFVCC < 2.14_B / BF2CC) - Authentication Bypass / Password Stealer / Denial of Service EDB-1183 · remote · Aug 29, 2005 · verified
- Battlefield 1942 1.6.19 + Vietnam 1.2 - Broadcast Client Crash EDB-679 · dos · Dec 7, 2004 · verified
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
References
- 20041207 Broadcast client crash in Battlefield 1942 1.6.19 and Vietnam 1.2 mailing-list
- battlefieldvietnam-numplayers-dos(18402) vdb-entry
- 11838 vdb-entry
- battlefield-numplayers-dos(18400) vdb-entry