Description
The ZCom_BitStream::Deserialize function in Zoidcom 1.0 beta 4 and earlier allows remote attackers to cause a denial of service via a crafted UDP packet with a large size value, which causes a memory allocation error or an out-of-bounds read.
References
- http://www.zoidcom.com/download/changelog.txt
- http://aluigi.altervista.org/adv/zoidboom-adv.txt
- 16495 vdb-entry
- zoidcom-deserialize-dos(20511) vdb-entry
- 20050510 Crash in Zoidcom 1.0 beta 4 mailing-list
- 1013939 vdb-entry