Description
Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.
References
- 20060331 Buffer-overflow and in-game crash in Zdaemon 1.08.01 mailing-list
- ADV-2006-1198 vdb-entry
- ADV-2006-1199 vdb-entry
- 17340 vdb-entry
- http://aluigi.altervista.org/adv/zdaebof-adv.txt
- 20060331 Buffer-overflow and in-game crash in Zdaemon 1.08.01 mailing-list
- 19509 third-party-advisory
- 19496 third-party-advisory
- zdaemon-isclientwadok-bo(25592) vdb-entry