CVE-2006-2875

CVE-2006-2875 : A stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier can be triggered by a svc_download command using compressed data, leading to arbitrary code execution on remote systems. The vulnerability affects the Quake 3 Engine line (and downst...

CVE-2006-2875

Stack-based buffer overflow in the CLParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svcdownload command with compressed data that triggers the overflow during expansion...

Quake 3 game engine buffer overflow

Buffer overflow on oversized compressed packet...

[Full-disclosure] Client buffer-overflow in Quake 3 engine (1.32c / rev 795)

Luigi Auriemma Application: Quake 3 engine http://www.idsoftware.com http://www.icculus.org/quake3/ Versions: Quake 3 = 1.32c Icculus.org Quake 3 = revision 795 other derived projects Games: exist many games which use the Quake 3 engine and probably they are all vulnerable but I'm not able and ha...

Quake 3 Engine - 'CL_ParseDownload' Remote Buffer Overflow

// source: https://www.securityfocus.com/bid/18271/info // // The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before copying it to an insufficiently sized memory buffer. // //...

Quake 3 Engine - CL_ParseDownload Remote Buffer Overflow

Quake 3 Engine - CLParseDownload Remote Buffer Overflow // source: https://www.securityfocus.com/bid/18271/info // // The Quake 3 engine is susceptible to a remote buffer-overflow vulnerability. This issue is due to the application's failure to properly bounds-check user-supplied data before...

CVE-2006-2587

Buffer overflow in the WebTool HTTP server component in 1 PunkBuster before 1.229, as used by multiple products including 2 America's Army 1.228 and earlier, 3 Battlefield 1942 1.158 and earlier, 4 Battlefield 2 1.184 and earlier, 5 Battlefield Vietnam 1.150 and earlier, 6 Call of Duty 1.173 and...

CVE-2006-2587

AFFECTED SOFTWARE: PunkBuster WebTool HTTP server component (before 1.229) used by multiple titles (America’s Army 1.228 and earlier; Battlefield 1942 1.158 and earlier; Battlefield 2 1.184 and earlier; Battlefield Vietnam 1.150 and earlier; Call of Duty 1.173 and earlier; Call of Duty 2 1.108 an...

Buffer-overflow in the WebTool service of PunkBuster for servers (minor than v1.229)

Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

PunkBuster 1.229 - WebTool Service Remote Buffer Overflow Denial of Service PoC Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietn...

PunkBuster < 1.229 - WebTool Service Remote Buffer Overflow (Denial of Service) (PoC)

Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Duty 2 = v1.108 DOOM 3 = v1.159 Enemy...

GLSA-200605-12 : Quake 3 engine based games: Buffer Overflow

The remote host is affected by the vulnerability described in GLSA-200605-12 Quake 3 engine based games: Buffer Overflow landser discovered a vulnerability within the 'remapShader' command. Due to a boundary handling error in 'remapShader', there is a possibility of a buffer overflow. Impact : An...

Directory traversal

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

DEBIAN-CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

Quake 3 engine based games: Buffer Overflow

Background Quake 3 is a multiplayer first person shooter. Description landser discovered a vulnerability within the "remapShader" command. Due to a boundary handling error in "remapShader", there is a possibility of a buffer overflow. Impact An attacker could set up a malicious game server and...

CVE-2006-2082

CVE-2006-2082 is a directory traversal vulnerability in the Quake 3 engine (used by Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, Star Trek: Voyager: Elite Force) where enabling sv_allowdownload permits a remote attacker to read arbitrary server files via .. in a .pk3 ...

CVE-2006-2082

Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager: Elite Force, when the svallowdownload cvar is enabled, allows remote attackers to read arbitrary files from the serve...

DEBIAN-CVE-2006-2236

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...