Description
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
References
- 14811 third-party-advisory
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- 12976 vdb-entry
- 20050402 In-game players kicking in the Quake 3 engine mailing-list
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322