Secunia Logo  


Secunia PSI WorldMap
 
CVE Reference: CVE-2006-1275
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE:
CVE-2006-1275

Description:
GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string.

CVE Status:
Candidate

References:

XF
  http://xforce.iss.net/xforce/xfdb/25164

SAID
  Secunia Advisory: SA19212

OSVDB
  23848

MISC
  http://aluigi.altervista.org/adv/ggzcdos-adv.txt

BID
  17094


Return to the previous page.