Denial of Service Vulnerability in Papyrus NASCAR Racing Products
CVE-2006-3393

Currently unrated

Key Information:

Vendor: Electronic Arts
Status: Nascar Racing
Vendor: CVE Published:; 6 July 2006

🔔 Create Electronic Arts Vulnerability Alert

What is CVE-2006-3393?

Certain versions of Papyrus NASCAR Racing, including NASCAR Racing 4 and the 2002 and 2003 Seasons, are vulnerable to a denial of service attack. Attackers can exploit this vulnerability by sending an empty UDP datagram, which is mishandled due to the improper management of the FIONREAD asynchronous socket. This flaw can lead to excessive CPU consumption, effectively disrupting the service. It is crucial for users to assess their software versions and consider implementing necessary patches to mitigate this risk.

References

http://www.securityfocus.com/bid/18778

vdb-entryx_refsource_BID

https://exchange.xforce.ibmcloud.com/vulnerabilities/27522

vdb-entryx_refsource_XF

http://aluigi.altervista.org/adv/nascarzero-adv.txt

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 6, 2006
Vulnerability Reserved
Jul 6, 2006

CVE-2006-3393 Data

JSON