Description
Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory.
References
- 20040325 Remote crash in Etherlords I 1.07 and II 1.03 mailing-list
- etherlords1-packet-dos(15618) vdb-entry
- http://aluigi.altervista.org/adv/ethboom-adv.txt
- 9979 vdb-entry
- etherlords2-packet-dos(15619) vdb-entry