cve/2006/CVE-2006-1593.md

CVE-2006-1593

Description

The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.

POC

Reference

• http://aluigi.altervista.org/adv/zdaebof-adv.txt
• http://securityreason.com/securityalert/662

Github

No PoCs found on GitHub currently.