CVE-2006-1408: Vavoom

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service (infinite loop) via (1) a packet with no data or (2) a large packet, which prevents Vavoom from discarding the packet from the socket.

Affected products

• Vavoom Vavoom: version 1.1 only; version 1.2 only; version 1.3 only; version 1.4 only; version 1.4_beta only; version 1.5 only; …

Published 2006-03-28. Last modified 2026-06-16.