CVE-2006-1593

The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

4.58% chance of exploitation in the next 30 days, 91th percentile

Published

2006-04-03

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/27547

References

• CVE Record
• NVD entry

Related

• CVE-2006-1592
• CVE-2006-1594
• CVE-2006-1590
• CVE-2006-1595
• CVE-2006-1586
• CVE-2006-1596