Browse CVEs

CRITICAL 9.8 CVE-2017-11721 Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified o… Ioquake3 after 2017-07-31 Fix from $2,3002017-08-03 HIGH 7.8 CVE-2017-6903 In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, Open… Ioquake3 after 2017-02-27 Fix from $1,9502017-03-14 HIGH 7.8 CVE-2010-5077 server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a deni… Ioquake3 Engine Mitigation only Fix from $1,9502014-10-27 MEDIUM 5.6 CVE-2012-3345 ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file. Ioquake3 Engine Mitigation only Fix from $1,6002012-06-15 HIGH 10.0 CVE-2011-3012EPSS 8% The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file ext… Ioquake3 Engine after 1.2 Fix from $1,9502011-08-09 HIGH 10.0 CVE-2011-2764EPSS 9% The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, Op… Ioquake3 Engine after 1.36 Fix from $1,9502011-08-04 HIGH 7.5 CVE-2011-1412 sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows … Ioquake3 Engine Patch available Fix from $1,9502011-08-04