Buffer overflow in Painkiller 1.35 and earlier and possibly other versions before 1.61 allows remote authenticated users to cause a denial of service and possibly execute arbitrary code via a long cd-key hash.