CVE-2009-3591

CVE-2009-3591 describes a denial-of-service vulnerability in Dopewars 1.5.12, allowing remote attackers to trigger a segmentation fault by sending a malformed REQUESTJET message with an invalid location. This vulnerability has a CVSS score of 5.0, indicating a medium severity, as it can be exploited remotely with low complexity and without authentication, leading to a partial availability impact. While not listed on the KEV catalog, exploit modules are available in Metasploit and ExploitDB, confirming its exploitability. Despite the availability of exploit code, there is no evidence of active exploitation, and it has received minimal community discussion or media coverage.