Vulnerability Details CVE-2006-1403
Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7 and earlier allows remote attackers to cause a denial of service and possibly execute arbitrary commands via format string specifiers in strings passed to the console.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.027
EPSS Ranking 84.2%
CVSS Severity
CVSS v2 Score 7.8
References
- http://aluigi.altervista.org/adv/csdoombof-adv.txt
- http://secunia.com/advisories/19389
- http://voxelsoft.com/csdoom/
- http://www.securityfocus.com/bid/17248
- http://www.vupen.com/english/advisories/2006/1105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25450
- http://aluigi.altervista.org/adv/csdoombof-adv.txt
- http://secunia.com/advisories/19389
- http://voxelsoft.com/csdoom/
- http://www.securityfocus.com/bid/17248
- http://www.vupen.com/english/advisories/2006/1105
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25450
Products affected by CVE-2006-1403
-
cpe:2.3:a:csdoom:csdoom_2005:0.7