General Graboids: Worms and Remote Code Execution in Command & Conquer
Summary
Atredis Partners document vulnerabilities in Command & Conquer: Generals, including a memory corruption flaw in the game's network handling that enables remote code execution and a secondary out-of-bounds write in the fragmentation logic. The post also describes a worm they built to demonstrate propagation across peers, and discusses community patches, vendor responses, and ongoing CVE disclosures with MITRE.