CVE-2006-1275

GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string.
Configurations

Configuration 1 (hide)

cpe:2.3:a:ggz_gaming_zone:ggz_gaming_zone:0.0.12:*:*:*:*:*:*:*

History

No history.

Information

Published : 2006-03-19 11:06

Updated : 2024-02-28 10:42


NVD link : CVE-2006-1275

Mitre link : CVE-2006-1275

CVE.ORG link : CVE-2006-1275


JSON object : View

Products Affected

ggz_gaming_zone

  • ggz_gaming_zone
CWE
CWE-399

Resource Management Errors