The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Alien_arena_2006 | Cor_entertainment | gold_5.00 (including) | gold_5.00 (including) |