Description
Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.
References
- 18778 vdb-entry
- nascarracing-udp-dos(27522) vdb-entry
- http://aluigi.altervista.org/adv/nascarzero-adv.txt
- ADV-2006-2647 vdb-entry
- 20947 third-party-advisory