Denial of Service in SpeakFreely for Windows

Reported September 23, 2003 by Luigi Auriemma.

VERSIONS AFFECTED

Speak Freely 7.6a for Windows and earlier

DESCRIPTION

A vulnerability in Speak Freely for Windows can result in a Denial of Service (DoS) condition. Sending multiple spoofed packets (more than 160 packets of 2 bytes or more) results in the termination of the program, with an error message such as, "Cannot create transmit socket for host (x.x.x.x), error 10055. No buffer space is available."

VENDOR RESPONSE

SpeakFreely has been notified.

CREDIT                                                                                                       
Discovered by Luigi Auriemma.