Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The (1) ZD_MissingPlayer, (2) ZD_UseItem, and (3) ZD_LoadNewClientLevel functions in sv_main.cpp for (a) Zdaemon 1.08.01 and (b) X-Doom allows remote attackers to cause a denial of service (crash) via an invalid player slot or item number, which causes an invalid memory access, possibly due to an invalid array index.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
ZDaemon远程溢出和拒绝服务漏洞
Vulnerability Description
Zdaemon是Internet上最流行的Doom引擎。 Zdaemon中存在多个远程漏洞，当客户端加入比赛时，服务器会检查客户端的wad文件(地图)与服务器上的是否一致。因此客户端发送服务器上所使用的每个wad的名称，然后是文件的本地md5哈希；服务器接收到文件名并使用strcpy()将其拷贝到256字节的缓冲区。my_strupr函数会转换所有大写的字符，但可以使用超长文件名覆盖返回地址，造成缓冲区溢出。
CVSS Information
N/A
Vulnerability Type
N/A