Luigi Auriemma

aluigi.org (ARCHIVE-ONLY FORUM!)
It is currently 19 Jul 2012 11:27

All times are UTC [ DST ]





Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 1 post ] 
Author Message
 Post subject: Unreal Tournament 3 and DirectPlay
PostPosted: 18 Jul 2010 19:35 

Joined: 13 Aug 2007 21:44
Posts: 4068
Location: http://aluigi.org
UT3:
like a tradition the summer of every year I give a testing to the Unreal engine and also to the most recent Epic's creature (Unreal Tournament 3)... and everytime I find something new.

this year I have found a very simple problem located in a command of the control channel called STEAMBLOB and it's enough interesting not much for the bug itself (only a pseudo NULL pointer) but mainly for the fact that it's necessary only one UDP packet for reaching the bugged code.

affected version: <= 2.1 (aka 3809)
advisory: http://aluigi.org/adv/ut3steamer-adv.txt

DP8:
as suggested by the title of this thread instead the second thing about which I want to talk is Microsoft DirectPlay8 in which I have casually found a couple of problems; "casually" because it wasn't subject of my tests.

the first problem was found yesterday and wasn't a good bug because located in the games that use DP8 and so not all games are affected.
the second one (yeah again a casual finding) instead affects just the DP8 component so it affects ANY game and this is enough ok.

The following is a partial list of the affected games:
Age of Wonders Shadow Magic, Bandits, Besieger, Dangerous Waters, Deer Hunter 2004 and 2005, Dungeon Siege 1 and 2, DXQuake 3, FairStrike, Freelancer, G.I. Combat Episode I, Gekkeiju, Giants: Citizen Kabuto, Hidden " Dangerous 2 / SS, Homeworld 2, Il rosso e il nero, Jolt3D, Judge Dredd vs Death, Locomotion, Monopoly Tycoon, New World Order, No brakes 4x4 racing, O.R.B, Operation Blockade, Operation Flashpoint, Perimeter, Pro Bass Fishing 2003, Pro Rugby Manager 2004, Robot Arena 2, S.W.I.N.E., Sacrifice, Scorch an Island, SkyTracks, State of Emergency, Steel Tide, Supreme Ruler 2010, Trophy Hunter 2003, True Crime Streets of LA, Vietcong, Warlords Battlecry III, Warrior Kings, Wings of War, Condor, FSHost and more

advisory: http://aluigi.org/adv/dplay8blah-adv.txt (the "blah" states how much I didn't like the first bug found yesterday)

RSS:
the following is the link to the RSS feeds of my advisories in case someone doesn't know it:
http://aluigi.org/adv-rss.php

I guess that for this summer my research is near the ending so I don't know if the RSS will still be useful


Top
 Profile  
 
 
Display posts from previous:  Sort by  
Forum locked This topic is locked, you cannot edit posts or make further replies.  [ 1 post ] 

All times are UTC [ DST ]


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot post attachments in this forum

Search for: