CVE-2008-3492

America's Army (aka AA or Army Game Project) 2.8.3.1 and earlier allows remote attackers to cause a denial of service (assertion failure and daemon exit) via a crafted UDP packet, probably involving a VoiceIndex value that is outside of the range specified by VOICE_MAX_CHATTERS.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2008-08-06

Last modified

2024-08-07

Weaknesses

CWE-20

Affected products

• America's Army (Americasarmy)

References

• http://aluigi.altervista.org/adv/armynchia-adv.txt
• http://aluigi.org/poc/armynchia.zip
• http://secunia.com/advisories/31353
• http://www.securityfocus.com/archive/1/495061/100/0/threaded
• http://www.securityfocus.com/bid/30519
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44152