Lucene search

K
ubuntucveUbuntu.comUB:CVE-2011-2764
HistoryAug 04, 2011 - 12:00 a.m.

CVE-2011-2764

2011-08-0400:00:00
ubuntu.com
ubuntu.com
4

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.108 Low

EPSS

Percentile

95.1%

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the
ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin’ Guns,
OpenArena, Tremulous, and ioUrbanTerror, does not properly determine
dangerous file extensions, which allows remote attackers to execute
arbitrary code via a crafted third-party addon that creates a Trojan horse
DLL file.

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.108 Low

EPSS

Percentile

95.1%