Finding a vulnerability in Star Wars Episode I: Racer
Summary
An in-depth vulnerability analysis of Star Wars Episode I: Racer focusing on the DirectPlay/IPX wrapper used for local multiplayer. The article reveals an out-of-bounds write in the game's DirectPlay-based message handling, explains how IPX-over-UDP encapsulation works, and documents a PoC and Wireshark dissector work, with practical steps for researchers.