CVE-2006-1275

EPSS 3.4%

GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string.

Affected products

n/a · n/a

public PoCs found — 1

exploitdbwww.exploit-db.com/exploits/27421unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://aluigi.altervista.org/adv/ggzcdos-adv.txt http://secunia.com/advisories/19212 https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 http://www.osvdb.org/23848 http://www.securityfocus.com/bid/17094 http://www.vupen.com/english/advisories/2006/0935