« Volver al listado

CVE-2006-3393

Estado: ModificadaAlta (7.8)—

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Electronic Arts — Nascar Racing

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2006-3393",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.8,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:C",
          "authentication": "NONE",
          "integrityImpact": "NONE",
          "accessComplexity": "LOW",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "NONE"
        },
        "acInsufInfo": false,
        "impactScore": 6.9,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2006-07-06T20:05:00.000",
  "references": [
    {
      "url": "http://aluigi.altervista.org/adv/nascarzero-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://secunia.com/advisories/20947",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/bid/18778",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2647",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27522",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://aluigi.altervista.org/adv/nascarzero-adv.txt",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/20947",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/bid/18778",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.vupen.com/english/advisories/2006/2647",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27522",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket."
    },
    {
      "lang": "es",
      "value": "Papyrus NASCAR Racing v4 4.1.3.1.6 y anteriores, 2002 Season v1.1.0.2 y anteriores y 2003 Season v1.2.0.1 y anteriores; permite a atacantes remotos provocar una denegación de servicio (consumo de la CPU) enviando un datagrama UDP vacío, el cuál no es descartado adecuadamente debido al uso del socket asíncrono FIONREAD."
    }
  ],
  "lastModified": "2026-06-16T22:26:58.550",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F5E42F63-74E9-4F1C-ACEE-74EEDF07CF12",
              "versionEndIncluding": "4.1.3.1.6"
            },
            {
              "criteria": "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "FA547B2C-87E1-4272-B506-356330749525",
              "versionEndIncluding": "2002_season_1.1.2"
            },
            {
              "criteria": "cpe:2.3:a:electronic_arts:nascar_racing:*:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "66EEB763-C4B4-4C72-83EC-2D26CBB12A01",
              "versionEndIncluding": "2003_season_1.2.1"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}