Description
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
References
- 15868 third-party-advisory
- 20050629 In-game /ignore crash in Soldier of Fortune II 1.03 mailing-list
- http://aluigi.altervista.org/adv/sof2ignore-adv.txt
- 17649 vdb-entry