CVEvulnerability
CVE-2006-1275
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-03-19
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-399
Description
GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string.
Affected configurations
• ggz gaming zone ggz gaming zone 0.0.12
Related
Weakness · not in database (1)
References
- http://aluigi.altervista.org/adv/ggzcdos-adv.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/19212 Vendor Advisory
- http://www.osvdb.org/23848 www.osvdb.org
- http://www.securityfocus.com/bid/17094 Exploit
- http://www.vupen.com/english/advisories/2006/0935 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/ggzcdos-adv.txt Exploit, Vendor Advisory
- http://secunia.com/advisories/19212 Vendor Advisory
- http://www.osvdb.org/23848 www.osvdb.org
- http://www.securityfocus.com/bid/17094 Exploit
- http://www.vupen.com/english/advisories/2006/0935 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 exchange.xforce.ibmcloud.com