CVE-2006-1275 Details
Description
GGZ Gaming Zone 0.0.12 allows remote attackers to cause a denial of service (client disconnect) via inputs that produce malformed XML, including (1) trailing ' (apostrophe) character on the ID attribute in a PLAYER XML tag, (2) joining with a long ID attribute or non-trailing ' characters, which causes a <none> name to be assigned, and then disconnecting, or (3) a long CDATA message attribute, which prevents closing tags from being added to the string.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| http://aluigi.altervista.org/adv/ggzcdos-adv.txt | CVE | ExploitVendor Advisory |
| http://secunia.com/advisories/19212 | CVE | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 | CVE | |
| http://www.osvdb.org/23848 | CVE | |
| http://www.securityfocus.com/bid/17094 | CVE | Exploit |
| http://www.vupen.com/english/advisories/2006/0935 | CVE | Vendor Advisory |
| http://aluigi.altervista.org/adv/ggzcdos-adv.txt | [email protected] | ExploitVendor Advisory |
| http://secunia.com/advisories/19212 | [email protected] | Vendor Advisory |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/25164 | [email protected] | |
| http://www.osvdb.org/23848 | [email protected] | |
| http://www.securityfocus.com/bid/17094 | [email protected] | Exploit |
| http://www.vupen.com/english/advisories/2006/0935 | [email protected] | Vendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-399 | Resource Management Errors | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| ggz gaming zone ggz gaming zone | 0.0.12 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 16, 2026 | CVE Modified | [email protected] |
| Apr 16, 2026 | [email protected] | |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Jul 20, 2017 | CVE Modified | [email protected] |
| Mar 20, 2006 | Initial Analysis | [email protected] |