CVE-2006-2875

CVE-2006-2875 : A stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier can be triggered by a svc_download command using compressed data, leading to arbitrary code execution on remote systems. The vulnerability affects the Quake 3 Engine line (and downst...

[Full-disclosure] Client buffer-overflow in Quake 3 engine (1.32c / rev 795)

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com http://www.icculus.org/quake3/ Versions: Quake 3 = 1.32c Icculus.org Quake 3 = revision 795 other derived projects Games: exist many games which use the Quake 3 engine and probably they are all vulnerable but I'm not able and ha...

Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/18271/info // // The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. // //...

GLSA-200605-12 : Quake 3 engine based games: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200605-12 Quake 3 engine based games: Buffer Overflow landser discovered a vulnerability within the 'remapShader' command. Due to a boundary handling error in 'remapShader', there is a possibility of a buffer overflow. Impact : An...

CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

CVE-2006-2082: Undefined Security Weakness

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

The CVE-2006-2236 issue affects the Quake 3 engine as used in ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, caused by a boundary handling error in the remapShader command that leads to a buffer overflow. This allows a remote attacker to execute arbitrary commands on affec...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

CVE-2006-2236: Undefined Security Weakness

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

Quake 3 Engine 1.32b R_RemapShader() Remote Client BoF Exploit

No description provided by source. // remapthis.c - "RRemapShader" q3 engine 1.32b client remote bof exploit // by landser - landser at hotmail.co.il // // this code works as a preloaded shared library on a game server, // it hooks two functions on the running server: // svcdirectconnect that is...

CVE-2005-0983: Undefined Security Weakness

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service client disconnect via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data...

In-game players kicking in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Vulnerables: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Wars Jedi Knight II: Jedi Outcast = 1.0...

Soldier of Fortune 2 1.03 - cl_guid Server Crash

Soldier of Fortune 2 1.03 - clguid Server Crash / by Luigi Auriemma / include include include include / Quake 3 engine Huffman algorithm 0.2 ALL the code comes from the Q3fusion project of Andrey Nazarov: http://sourceforge.net/projects/q3fusion/ I have simply modified some variables and the...

CVE-2005-0430

The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service shutdown game server and possibly crash the server via a long infostring, possibly triggering a buffer overflow...

CVE-2005-0430: Undefined Security Weakness

The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service shutdown game server and possibly crash the server via a long infostring, possibly triggering a buffer overflow...

Infostring crash and shutdown in the Quake 3 engine

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com Games: - Call of Duty = 1.5 - Call of Duty: United Offensive = 1.51 - Heavy Metal: F.A.K.K.2 = 1.02 - Quake III Arena = 1.32 - Return to Castle Wolfenstein = 1.41 - Soldier of Fortune II: Double Helix = 1.03 - Star Trek Voyager:...

CVE-2005-0430

The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service shutdown game server and possibly crash the server via a long infostring, possibly triggering a buffer overflow...