VULNERABILITY INTELLIGENCE

CVE-2006-1147

CVSS score4 MEDIUM
EPSS probability3.13%
CISA KEVNot currently listed
Published2006-03-10
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:S/C:N/I:N/A:P

Description

The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.

Primary references