CVE-2005-0983

CVE-2005-0983 concerns the Quake 3 engine (as used in multiple games). The vulnerability allows a remote attacker to cause a denial of service (client disconnect) by sending a long message that isn’t properly truncated, causing the engine to treat the remainder of the data as network input. Concr...

CVE-2006-2236

The CVE-2006-2236 issue affects the Quake 3 engine as used in ET 2.60, Return to Castle Wolfenstein 1.41, and Quake III Arena 1.32b, caused by a boundary handling error in the remapShader command that leads to a buffer overflow. This allows a remote attacker to execute arbitrary commands on affec...

CVE-2005-0430

The CVE-2005-0430 entry covers the Quake 3 engine (as used in multiple game packages). The issue arises from processing a long infostring, which can allow remote attackers to cause a denial of service (shutdown/crash of the game server) potentially via a buffer overflow. The description specifies...

CVE-2006-3325

The CVE affects the client component (cl_parse.c) of the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier. The flaw allows remote servers to send a sequence of cvar names/values that can overwrite write-protected client cvars, such as cl_allowdownload (A...

CVE-2006-3324

The CVE-2006-3324 entry describes a remote arbitrary-file overwrite vulnerability in the id3 Quake 3 Engine and ioquake3 (ioquake3) before revision 804, exploitable via the Automatic Downloading option by sending a long string of filenames contained in the neededpaks buffer. The underlying issue ...

CVE-2006-3401

CVE-2006-3401 affects the Quake 3 Engine as used by Quake 3: Arena (versions 1.32b/1.32c). The vulnerability is a stack-based buffer overflow in handling CS_ITEMS values, which could allow a remote attacker to cause a denial of service and potentially execute arbitrary code. The provided document...

CVE-2006-2082

CVE-2006-2082 is a directory traversal vulnerability in the Quake 3 engine (used by Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, Star Trek: Voyager: Elite Force) where enabling sv_allowdownload permits a remote attacker to read arbitrary server files via .. in a .pk3 ...

CVE-2006-3400

Affects Quake 3 Engine as used by Soldier of Fortune 2 GOLD 1.03. The vulnerability is a stack-based buffer overflow in the CG_ServerCommand function, triggered by a long command sent from the server. Impact per the sources: remote denial of service and potentially arbitrary code execution. No ex...

CVE-2006-2875

CVE-2006-2875 : A stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier can be triggered by a svc_download command using compressed data, leading to arbitrary code execution on remote systems. The vulnerability affects the Quake 3 Engine line (and downst...