| Package | Affected versions | Patched versions |
|---|---|---|
| x-doom | = 1.06.07 | |
| zdaemon | ≤ 1.08.01 |
The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free