Vavoom 1.24 - str.cpp VStr::Resize Function Crafted UDP Packet Remote Denial of Service

                							

                source: http://www.securityfocus.com/bid/25436/info
 
Vavoom is prone to multiple remote vulnerabilities, including a buffer-overflow issue, a format-string issue, and a denial-of-service issue.
 
An attacker can exploit these issues to execute arbitrary code within the context of the affected application or crash the application, denying service to legitimate users.
 
Vavoom 1.24 is vulnerable; prior versions may also be affected. 

For the denial-of-service vulnerability, the attacker sends a packet to UDP port 26000 containing the following hexadecimal bytes: 80 02 ff 00