CVE-2006-3393

Severity: high (CVSS 7.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 2.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2006-07-06 · updated 2026-06-16

Description

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service (CPU consumption) by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket.

Affected products

Electronic Arts Nascar Racing: through 4.1.3.1.6; through 2002_season_1.1.2; through 2003_season_1.2.1

References

http://aluigi.altervista.org/adv/nascarzero-adv.txt
http://secunia.com/advisories/20947
http://www.securityfocus.com/bid/18778
http://www.vupen.com/english/advisories/2006/2647
https://exchange.xforce.ibmcloud.com/vulnerabilities/27522
http://aluigi.altervista.org/adv/nascarzero-adv.txt
http://secunia.com/advisories/20947
http://www.securityfocus.com/bid/18778
http://www.vupen.com/english/advisories/2006/2647
https://exchange.xforce.ibmcloud.com/vulnerabilities/27522

Get alerted when CVE-2006-3393 or the next vulnerability affects your stack