Signature Detail

APP: Microsoft DirectPlay DoS

This signature detects attempts to exploit a vulnerability in Microsoft DirectPlay. Attackers can send a malformed DirectPlay packet to a user to cause the user's game to be unable to send or receive gameplay updates; the user must restart the application.

Extended Description

Microsoft DirectX DirectPlay is affected by a remote denial of service vulnerability. This issue is due to a failure of the affected library to properly handle malformed network data. An attacker can exploit this vulnerability to cause an application using the affected DirectPlay library to crash, denying service to legitimate users.

Affected Products

• Microsoft directx 7.0
• Microsoft directx 7.0 a
• Microsoft directx 7.1
• Microsoft directx 8.0
• Microsoft directx 8.0 a
• Microsoft directx 8.1
• Microsoft directx 8.1 a
• Microsoft directx 8.1 b
• Microsoft directx 8.2
• Microsoft directx 9.0 a
• Microsoft directx 9.0b
• Microsoft windows_2000_datacenter_server SP2
• Microsoft windows_2000_datacenter_server SP3
• Microsoft windows_2000_datacenter_server SP4
• Microsoft windows_2000_professional SP2
• Microsoft windows_2000_professional SP3
• Microsoft windows_2000_professional SP4
• Microsoft windows_2000_server SP2
• Microsoft windows_2000_server SP3
• Microsoft windows_2000_server SP4
• Microsoft windows_2000_terminal_services SP2
• Microsoft windows_2000_terminal_services SP3
• Microsoft windows_2000_terminal_services SP4
• Microsoft windows_98
• Microsoft windows_98se
• Microsoft windows_me
• Microsoft windows_server_2003_datacenter_edition
• Microsoft windows_server_2003_datacenter_edition_itanium
• Microsoft windows_server_2003_enterprise_edition
• Microsoft windows_server_2003_enterprise_edition_itanium
• Microsoft windows_server_2003_standard_edition
• Microsoft windows_server_2003_web_edition
• Microsoft windows_xp_64-bit_edition SP1
• Microsoft windows_xp_64-bit_edition
• Microsoft windows_xp_64-bit_edition_version_2003 SP1
• Microsoft windows_xp_64-bit_edition_version_2003
• Microsoft windows_xp_home SP1
• Microsoft windows_xp_home
• Microsoft windows_xp_professional SP1
• Microsoft windows_xp_professional

References

• BugTraq: 10487
• CVE: CVE-2004-0202
• URL: http://www.microsoft.com/technet/security/bulletin/ms04-016.mspx
• URL: http://www.securityfocus.com/bid/10487