CVE-2006-1593

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

CVE-2006-1593

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

CVE-2006-1593

The CVE-2006-1593 entry affects sv_main.cpp in Zdaemon 1.08.01 and X-Doom, specifically the functions ZD_MissingPlayer, ZD_UseItem, and ZD_LoadNewClientLevel. The issue allows remote attackers to cause a denial of service (crash) by supplying an invalid player slot or item number, leading to an i...

CVE-2006-1593: Undefined Security Weakness

The 1 ZDMissingPlayer, 2 ZDUseItem, and 3 ZDLoadNewClientLevel functions in svmain.cpp for a Zdaemon 1.08.01 and b X-Doom allows remote attackers to cause a denial of service crash via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array...

Integer overflow

Integer signedness error in the enetprotocolhandleincomingcommands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet wi...

CVE-2006-1194

Integer signedness error in the enetprotocolhandleincomingcommands function in protocol.c for ENet library CVS version Jul 2005 and earlier, as used in products including 1 Cube, 2 Sauerbraten, and 3 Duke3dw32, allows remote attackers to cause a denial of service application crash via a packet wi...

Multiple vulnerabilities in Cube engine 2005_08_29

Luigi Auriemma Application: Cube engine http://www.cubeengine.com Versions: = 20050829 Platforms: Windows, nix, BSD and MacOS Bugs: A sgetstr buffer-overflow B invalid memory access C clients crash through invalid map Exploitation: remote, versus both server and clients Date: 06 Mar 2006 Author:...

Cube <= 2005_08_29 Multiple BoF/Crash Vulnerabilities Exploit

Exploit for unknown platform in category dos / poc ============================================================= Cube include include include define VER "0.1" define PORT 28765 define MAXTRANS 5000 define BOFSZ MAXTRANS + 2400 define MAPSUX...

Cube &lt;= 2005_08_29 Multiple BoF/Crash Vulnerabilities Exploit

No description provided by source. / by Luigi Auriemma You NEED Enet for compiling this tool then remember -lenet http://enet.bespin.org / http://enet.cubik.org / include stdio.h include stdlib.h include string.h include enet/enet.h define VER "0.1" define PORT 28765 define MAXTRANS 5000 define...

CVE-2005-2923: Improper Input Validation

The IMAP server in IMail Server 8.20 in Ipswitch Collaboration Suite ICS before 2.02 allows remote attackers to cause a denial of service crash via a long argument to the LIST command, which causes IMail Server to reference invalid memory...

CVE-2005-1204

Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a crafted packet to TCP port 61427, which causes an invalid memory access...

CVE-2005-1204: Undefined Security Weakness

Desktop Rover 3.0, and possibly earlier versions, allows remote attackers to cause a denial of service application crash via a crafted packet to TCP port 61427, which causes an invalid memory access...

GLSA-200503-03 : Gaim: Multiple Denial of Service issues

The remote host is affected by the vulnerability described in GLSA-200503-03 Gaim: Multiple Denial of Service issues Specially crafted SNAC packets sent by other instant-messaging users can cause Gaim to loop endlessly CAN-2005-0472. Malformed HTML code could lead to invalid memory accesses...

CVE-2005-0208: Undefined Security Weakness

The HTML parsing functions in Gaim before 1.1.4 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0473...

Gaim vulnerable to HTML processing denial of service

Overview Gaim contains a flaw in HTML processing that may result in an invalid memory access and denial of service condition. Description From the Gaim project:Gaim is a multi-protocol instant messaging IM client for Linux, BSD, MacOS X, and Windows. It is compatible with AIM and ICQ Oscar...

CVE-2004-1615

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

CVE-2004-1614

Mozilla allows remote attackers to cause a denial of service application crash from invalid memory access via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme...

CVE-2004-1615: Undefined Security Weakness

Opera allows remote attackers to cause a denial of service invalid memory reference and application crash via a web page or HTML email that contains a TBODY tag with a large COL SPAN value, as demonstrated by mangleme...

CVE-2005-0473: Undefined Security Weakness

The HTML parsing functions in Gaim before 1.1.3 allow remote attackers to cause a denial of service application crash via malformed HTML that causes "an invalid memory access," a different vulnerability than CVE-2005-0208...

CVE-2004-1305

The Windows Animated Cursor ANI capability in Windows NT, Windows 2000 through SP4, Windows XP through SP1, and Windows 2003 allow remote attackers to cause a denial of service via 1 the frame number set to zero, which causes an invalid memory address to be used and leads to a kernel crash, or 2...