Signature Detail

GAME: DirectPlay Null Pointer Denial of Service

This signature detects attempts to exploit a known vulnerability in DirectPlay, a component of DirectX 8. A malicious player can send malformed player join packets containing a null pointer, causing the server to crash.

Extended Description

Microsoft DirectX is prone to multiple denial-of-service vulnerabilities. An attacker can exploit these issues to interrupt existing sessions or crash or freeze the application that uses DirectX, resulting in denial-of-service conditions.

Affected Products

• Gabriel_interactive robot_arena 2
• Gas_powered_games dungeon_siege 2
• Microsoft directx 8.0
• Microsoft directx 8.0 a
• Microsoft directx 8.1
• Microsoft directx 8.1 a
• Microsoft directx 8.1 b
• Microsoft directx 8.2
• Microsoft directx 9.0
• Microsoft directx 9.0 a
• Microsoft directx 9.0b
• Microsoft directx 9.0 c
• Pterodon vietcong
• Relic_entertainment homeworld 2
• Southlogic_studios deer_hunter 2004
• Southlogic_studios deer_hunter 2005

References

• BugTraq: 41794
• URL: http://msdn.microsoft.com/directx/
• URL: http://aluigi.altervista.org/adv/dplay8blah-adv.txt