CVE-2006-1147: Cor Entertainment Alien Arena 2006

Medium severity, CVSS 4.0. EPSS: 3.1% chance of exploitation in the next 30 days.

The Com_sprintf function in q_shared.c in Alien Arena 2006 Gold Edition 5.00 does not properly NULL terminate certain long strings, which allows remote attackers (possibly authenticated) to cause a denial of service (application crash) via a long skin, weapon, or model name.

Affected products

• Cor Entertainment Alien Arena 2006: version gold_5.00 only

Published 2006-03-10. Last modified 2026-06-16.