CVE-2006-1147

The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.

Date published : 2006-03-10

http://www.securityfocus.com/bid/17028

http://www.securityfocus.com/archive/1/426984/100/0/threaded