UBUNTU-CVE-2017-11721

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted packet...

Buffer overflow

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted packet...

DEBIAN-CVE-2017-11721

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted packet...

CVE-2017-11721

CVE-2017-11721 concerns a read buffer overflow in the ioquake3/idtech3 engine (pre-2017-08-02) that allows remote attackers to crash the application or cause other impact via a crafted packet. Multiple connected advisories (Debian DSA-3948-1, DSA-3941-1; Mageia MGASA-2018-0148; OSV/OPENVAS entrie...

CVE-2017-11721

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted packet...

CVE-2017-11721

Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service application crash or possibly have unspecified other impact via a crafted packet...

ioquake3 Buffer Overflow Vulnerability

ioQuake3 is a modified version of the Thor's Hammer 3 engine. A buffer overflow vulnerability exists in versions of ioquake3 prior to 2017-08-02. A remote attacker can exploit this vulnerability with the help of specially crafted packets to cause a denial of service application crash...

Debian DSA-3812-1 : ioquake3 - security update

It was discovered that ioquake3, a modified version of the ioQuake3 game engine performs insufficent restrictions on automatically downloaded content pk3 files or game code, which allows malicious game servers to modify configuration settings including driver settings. %NASLMINLEVEL 70300 C Tenab...

[SECURITY] [DSA 3812-1] ioquake3 security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3812-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff March 18, 2017 https://www.debian.org/security/faq -...

DSA-3812-1 ioquake3 - security update

Bulletin has no description...

Debian Security Advisory DSA 3812-1 (ioquake3 - security update)

It was discovered that ioquake3, a modified version of the ioQuake3 game engine performs insufficent restrictions on automatically downloaded content pk3 files or game code, which allows malicious game servers to modify configuration settings including driver settings. OpenVAS Vulnerability Test...

Debian: Security Advisory (DSA-3812-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

Security feature bypass

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

CVE-2017-6903

Ioquake3 and related id Tech 3 forks are affected by CVE-2017-6903 due to insufficient restrictions on auto-downloaded content. A malicious auto-downloaded file could be loaded as native code DLLs, and its configuration defaults could override user settings, potentially causing sandbox escape thr...

CVE-2017-6903

In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw, and other id Tech 3 aka Quake 3 engine forks. A malicious auto-downloaded file can trigger loading of crafted auto-downloaded files as...

id Tech 3 -- remote code execution vulnerability

The content auto-download of id Tech 3 can be used to deliver maliciously crafted content, that triggers downloading of further content and loading and executing it as native code with user credentials. This affects ioquake3, ioUrbanTerror, OpenArena, the original Quake 3 Arena and other forks...