4 matches found
CVE-2005-0983
CVE-2005-0983 concerns the Quake 3 engine (as used in multiple games). The vulnerability allows a remote attacker to cause a denial of service (client disconnect) by sending a long message that isn’t properly truncated, causing the engine to treat the remainder of the data as network input. Concr...
CVE-2006-2236
The CVE-2006-2236 issue affects the Quake 3 engine as used in ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, caused by a boundary handling error in the remapShader command that leads to a buffer overflow. This allows a remote attacker to execute arbitrary commands on affec...
CVE-2001-1289
CVE-2001-1289 affects Quake 3 Arena 1.29f/g. A remote attacker can cause a denial of service (crash) by sending a malformed connection/login packet that begins with 0xFF characters, crashing the Quake3 Arena daemon. OpenVAS/NASL details indicate the affected service port 27960 and describe the at...
CVE-2000-0303
Quake3 Arena is affected by CVE-2000-0303 due to a path traversal (dot dot) vulnerability that enables a malicious server operator to read or modify files on a client. The issue, described in the NVD entry, indicates a network-accessible vector with low attack complexity and no authentication req...