CVE-2011-2764

CVE-2011-2764 affects the ioQuake3 engine (version 1.36 and earlier) as used in World of Padman, Smokin’ Guns, OpenArena, Tremulous, and ioUrbanTerror. The vulnerability arises from the function FS_CheckFilenameIsNotExecutable in qcommon/files.c, which does not properly detect dangerous file exte...

ioQuake3 game engine security vulnerabilities

Shell characters vulnerability, code execution...

Two security issues fixed in ioQuake3 engine

Hello, Quake 3 is a popular online first person shooter developed by IDsoftware 1 that has been released in 1999 and is still widely played. After the release of the source code under the GPL, the ioQuake3 project 2 was started that is dedicated to maintaining the existing codebase. Several game...

Fedora Update for quake3 FEDORA-2010-8558

Check for the Version of quake3 OpenVAS Vulnerability Test Fedora Update for quake3 FEDORA-2010-8558 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the term...

[SECURITY] Fedora 13 Update: quake3-1.36-7.svn1783.fc13

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

[SECURITY] Fedora 12 Update: quake3-1.36-7.svn1783.fc12

This package contains the enhanced opensource ioquake3 version of the Quake 3 Arena engine. This engine can be used to play a number of games based on th is engine, below is an incomplete list: OpenArena, Free, Open Source Quake3 like game, recommended! packagename: openarena Urban Terror, gratis...

GLSA-200901-06 : Tremulous: User-assisted execution of arbitrary code

The remote host is affected by the vulnerability described in GLSA-200901-06 Tremulous: User-assisted execution of arbitrary code It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact : A remote attacker could entice a user ...

Tremulous: User-assisted execution of arbitrary code

Background Tremulous is a team-based First Person Shooter game. Description It has been reported that Tremulous includes a vulnerable version of the ioQuake3 engine GLSA 200605-12, CVE-2006-2236. Impact A remote attacker could entice a user to connect to a malicious games server, possibly resulti...

CVE-2006-3325

client/clparse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine ioquake3 revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as clallowdownload for Automatic Downloading and fshomepath for the quake3...