Description
Carsten's 3D Engine (Ca3DE), March 2004 version and earlier, allows remote attackers to execute arbitrary code via text strings that are not null terminated, which triggers a null dereference.
References
- http://aluigi.altervista.org/adv/ca3dex-adv.txt
- 14483 third-party-advisory
- 12727 vdb-entry
- 1013361 vdb-entry