CVE-2006-1593

The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

4.69% chance of exploitation in the next 30 days, 92nd percentile

Published

2006-04-03

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27547

Security advisories

• http://secunia.com/advisories/19496
• http://secunia.com/advisories/19509
• http://www.vupen.com/english/advisories/2006/1198
• http://www.vupen.com/english/advisories/2006/1199
• http://www.securityfocus.com/bid/17340

References

• CVE Record
• NVD entry