CVE-2006-1403: Format string vulnerability in the PrintString function in c_console.cpp in client/server Doom (csDoom) 0.7...

Security readout for executives and security teams

CVE-2006-1403 affects client/server Doom (csDoom) 0.7 and earlier. A remote user can send crafted text that reaches the game console and may crash the process or, in some cases, run commands. It matters mainly where legacy csDoom clients or servers are still reachable. Exposure is likely limited to legacy csDoom 0.7 or earlier installations, especially public game servers or clients processing remote server-supplied console text. The supplied affected-product metadata is incomplete, so inventory must rely on software/version discovery. Low for most enterprises unless legacy csDoom is present. If found exposed, prioritize removal or isolation because the stated impact includes remote crash and possible command execution, but current exploitation evidence is not supplied. Mitigation focus: Identify and retire csDoom 0.7 or earlier deployments.; Check csDoom or vendor guidance for a fixed release.; Remove public network exposure where retirement is not immediate..

Prepared

Jun 29, 2026, 13:35 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.