5
CVSSv2

CVE-2006-1593

Published: 03/04/2006 Updated: 18/10/2018
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

Vulnerability Summary

The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote malicious users to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.

Vulnerable Product Search on Vulmon Subscribe to Product

x-doom x-doom 1.06.07

zdaemon zdaemon

Exploits

source: wwwsecurityfocuscom/bid/17340/info ZDaemon is prone to multiple remote vulnerabilities A buffer overflow vulnerability exists in the 'is_client_wad_ok' function A remote denial of service condition also affects the server ZDaemon 10801 and prior versions are affected githubcom/offensive-security/exploitdb-bin-s ...