[!] Fixing chat vulnerability in GameServer.exe 1.38

[V3ct0r 2,117]

[!] Fixing chat vulnerability in GameServer.exe 1.38

 

The vulnerability:

If a player writes a string to the local chat, the GameServer.exe, on which the player’s character is located, will close:

ABCDEFGHIKLMNOPQRSTVXYZ

 

A fix:

1. Open GameServer.exe in any HEX-editor, for example, HxD;

2. Find a sequence of bytes:

50 E9 74 02 00 00 50 6A 01 6A 04 8B 4D EC

 

3. Replace the sequence to another one:

50 68 FF C9 9A 3B 50 6A 01 6A 04 8B 4D EC

 

4. Save changes;

5. Check that GameServer.exe is working and the vulnerability has disappeared:

[wizel1 0]

is problem with 1.36?

[MonkeyCode 453]

Only 1.38 with ChatHandler

[wizel1 0]

was problem i see many have is with stall clone or dupe?

also a gameserver crash from exploit is this exploit this problem?

[V3ct0r 2,117]

On 5/7/2019 at 11:11 PM, wizel1 said:

also a gameserver crash from exploit is this exploit this problem?

No, probably it is caused by buffer overflow in SystemNotice(), PopupNotice(), BickerNotice() and PlayerNotice() functions.

 

 

They use unsafe vsprintf() function.

[jianjian 0]

Are there any bugs in version 2.4?

[V3ct0r 2,117]

On 10/18/2020 at 5:33 AM, jianjian said:

Are there any bugs in version 2.4?

No, there is no such a vulnerability in 2.x versions.

[JCarlosNewInScripts 0]

victor crack, as I can add, that green bar of HP/HP 3715/3715, I have searched the page and can't find. Greetings from the Dominican Republic. LATAM