Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

F.E.A.R. 1.01 likes lithsock
From: Luigi Auriemma <aluigi () autistici org>
Date: Fri, 21 Oct 2005 18:21:36 +0200


F.E.A.R. (First Encounter Assault and Recon, http://www.whatisfear.com)
is the recent FPS game developed by Monolith.

I knew it was vulnerable from many months but I was really curious to
see if the developers were so brave to leave this old "silent socket
termination" bug unpatched not only in the retail game released in
October but also in the 1.01 patch released just 4 days ago.

The original advisory and proof-of-concept I released in the far December
2004 are available here:

  http://aluigi.altervista.org/adv/lithsock-adv.txt
  http://aluigi.altervista.org/poc/lithsock.zip


--- 
Luigi Auriemma 
http://aluigi.altervista.org 
_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
  • F.E.A.R. 1.01 likes lithsock Luigi Auriemma (Oct 21)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault