CVE-2004-0247 The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data len...
MediumCVSS 5.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The client and server of Chaser 1.50 and earlier allow remote attackers to cause a denial of service (crash via exception) via a UDP packet with a length field that is greater than the actual data length, which causes Chaser to read unexpected memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cauldron chaser client | = 1.5 | No fix listed |
| cauldron chaser server | = 1.4.9 | No fix listed |
| cauldron chaser server | = 1.5 | No fix listed |
References
- 20040203 Remote crash of Chaser game <= 1.50 mailing-list
- 9567 exploit vdb-entry vendor-advisory
- chaser-memory-dos(15031) vdb-entry