CVE-2006-1592

2006-04-0310:00:00

mitre

www.cve.org

AI Score

7.9

Confidence

High

EPSS

0.12

Percentile

95.4%

JSON

Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.

References

aluigi.altervista.org/adv/zdaebof-adv.txt

lists.grok.org.uk/pipermail/full-disclosure/2006-March/044775.html

secunia.com/advisories/19496

secunia.com/advisories/19509

www.securityfocus.com/archive/1/429521/100/0/threaded

www.securityfocus.com/bid/17340

www.vupen.com/english/advisories/2006/1198

www.vupen.com/english/advisories/2006/1199

exchange.xforce.ibmcloud.com/vulnerabilities/25592