CVE-2006-1592: X-Doom

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Buffer overflow in the is_client_wad_ok function in w_wad.cpp for (1) Zdaemon 1.08.01 and (2) X-Doom allows remote attackers to execute arbitrary code via a long filename argument.

Affected products

• X-Doom X-Doom: version 1.06.07 only
• Zdaemon Zdaemon: version 1.08.01 only

Published 2006-04-03. Last modified 2026-06-16.