The World in Conflict server is vulneable to a Denial of Service attack (crash) caused by the access to a NULL pointer. The problem happens in the GetMagicNumberString function which takes the third byte of the data received from the client on the VOIP port 52999 and returns a text string if this value is valid ("ABC" for type 0, "DEF" for 1, "GHI" for 2 and so on) or NULL if it's invalid. Then the string returned by this function is compared with another one and here happens the NULL pointer access.
http://www.securiteam.com/windowsntf...Y0042AK0K.html
