Description
Multiple buffer overflows in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via (1) a crafted "0x5c" packet or (2) many 32-bit numbers in a "0x18" packet, or cause a denial of service (crash) via (3) a large "0x4b" packet.
References
- dropteam-0x5cpacket-bo(36975) vdb-entry
- dropteam-0x4bpacket-bo(36977) vdb-entry
- http://aluigi.altervista.org/adv/dropteamz-adv.txt
- 20071005 Multiple vulnerabilities in Dropteam 1.3.3 mailing-list
- 25943 vdb-entry
- 27107 third-party-advisory
- dropteam-0x18packet-bo(36976) vdb-entry
- 3202 third-party-advisory