Code injection

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...

CVE-2011-2764

CVE-2011-2764 affects the ioQuake3 engine (version 1.36 and earlier) as used in World of Padman, Smokin’ Guns, OpenArena, Tremulous, and ioUrbanTerror. The vulnerability arises from the function FS_CheckFilenameIsNotExecutable in qcommon/files.c, which does not properly detect dangerous file exte...

CVE-2011-2764

The FSCheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code...