Description
The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a string to the VoIP port (52999/tcp) with an invalid value in the third byte.
References
- worldinconflict-getmagicnumberstring-dos(37034) vdb-entry
- 25985 vdb-entry
- 20071009 NULL pointer crash in World in Conflict 1.000 mailing-list
- http://www.massive.se/Index.asp?nNewsId=1387
- 27157 third-party-advisory
- ADV-2007-3448 vdb-entry
- 3214 third-party-advisory