CVE-2007-5369

The GetMagicNumberString function in Massive Entertainment World in Conflict 1.000 and earlier allows remote attackers to cause a denial of service (NULL dereference and daemon crash) via a string to the VoIP port (52999/tcp) with an invalid value in the third byte.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2007-10-11

Last modified

2024-08-07

Weaknesses

CWE-189

Affected products

• World In Conflict (Massive Entertainment)

References

• http://secunia.com/advisories/27157
• http://securityreason.com/securityalert/3214
• http://www.massive.se/Index.asp?nNewsId=1387
• http://www.securityfocus.com/archive/1/481895/100/0/threaded
• http://www.securityfocus.com/bid/25985
• http://www.vupen.com/english/advisories/2007/3448
• https://exchange.xforce.ibmcloud.com/vulnerabilities/37034