UT3:
like a tradition the summer of every year I give a testing to the Unreal engine and also to the most recent Epic's creature (Unreal Tournament 3)... and everytime I find something new.
this year I have found a very simple problem located in a command of the control channel called STEAMBLOB and it's enough interesting not much for the bug itself (only a pseudo NULL pointer) but mainly for the fact that it's necessary only one UDP packet for reaching the bugged code.
affected version: <= 2.1 (aka 3809)
advisory:
http://aluigi.org/adv/ut3steamer-adv.txtDP8:
as suggested by the title of this thread instead the second thing about which I want to talk is Microsoft DirectPlay8 in which I have casually found a couple of problems; "casually" because it wasn't subject of my tests.
the first problem was found yesterday and wasn't a good bug because located in the games that use DP8 and so not all games are affected.
the second one (yeah again a casual finding) instead affects just the DP8 component so it affects ANY game and this is enough ok.
The following is a partial list of the affected games:
Age of Wonders Shadow Magic, Bandits, Besieger, Dangerous Waters, Deer Hunter 2004 and 2005, Dungeon Siege 1 and 2, DXQuake 3, FairStrike, Freelancer, G.I. Combat Episode I, Gekkeiju, Giants: Citizen Kabuto, Hidden " Dangerous 2 / SS, Homeworld 2, Il rosso e il nero, Jolt3D, Judge Dredd vs Death, Locomotion, Monopoly Tycoon, New World Order, No brakes 4x4 racing, O.R.B, Operation Blockade, Operation Flashpoint, Perimeter, Pro Bass Fishing 2003, Pro Rugby Manager 2004, Robot Arena 2, S.W.I.N.E., Sacrifice, Scorch an Island, SkyTracks, State of Emergency, Steel Tide, Supreme Ruler 2010, Trophy Hunter 2003, True Crime Streets of LA, Vietcong, Warlords Battlecry III, Warrior Kings, Wings of War, Condor, FSHost and more
advisory:
http://aluigi.org/adv/dplay8blah-adv.txt (the "blah" states how much I didn't like the first bug found yesterday)
RSS:
the following is the link to the RSS feeds of my advisories in case someone doesn't know it:
http://aluigi.org/adv-rss.phpI guess that for this summer my research is near the ending so I don't know if the RSS will still be useful
