CVE-2006-3393: Electronic Arts Nascar Racing

High severity, CVSS 7.8. EPSS: 2% chance of exploitation in the next 30 days.

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.

Affected products

• Electronic Arts Nascar Racing: up to and including 4.1.3.1.6; up to and including 2002_season_1.1.2; up to and including 2003_season_1.2.1

Published 2006-07-06. Last modified 2026-06-16.