Id Software
27 CVEs across 15 Id Software products. Browse Id Software vulnerabilities, severities, and proof-of-concept exploits.
Id Software products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2007-5248 | | 2007-10-06 | Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earli… | |
CVE-2006-3401 | | 2006-07-06 | Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execu… | |
CVE-2006-3400 | | 2006-07-06 | Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to ca… | |
CVE-2006-3325 | | 2006-06-30 | client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwri… | |
CVE-2006-3324 | | 2006-06-30 | The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite a… | |
CVE-2006-2875 | | 2006-06-07 | Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to exec… | |
CVE-2006-2082 | | 2006-05-10 | Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, an… | |
CVE-2006-2236 | | 2006-05-08 | Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to… | |
CVE-2005-0983 | | 2005-05-02 | Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly t… | |
CVE-2005-0430 | | 2005-02-12 | The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the serve… | |
CVE-2004-2599 | | 2004-12-31 | Multiple buffer overflows in Quake II server before R1Q2, as used in multiple products, allow local users to cause a denial of service (application crash) via… | |
CVE-2004-2598 | | 2004-12-31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to corrupt the server's client state data structure by exiting a session wit… | |
CVE-2004-2597 | | 2004-12-31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already c… | |
CVE-2004-2596 | | 2004-12-31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large nu… | |
CVE-2004-2595 | | 2004-12-31 | Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of servi… | |
CVE-2004-2594 | | 2004-12-31 | Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files… | |
CVE-2004-2593 | | 2004-12-31 | Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service… | |
CVE-2004-2592 | | 2004-12-31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that… | |
CVE-2002-0770 | | 2002-08-12 | Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin com… | |
CVE-2001-1289 | | 2001-07-29 | Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255… | |
CVE-1999-1569 | | 2001-07-17 | Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP conne… | |
CVE-2000-1080 | | 2000-11-01 | Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet. | |
CVE-2000-0303 | | 2000-05-03 | Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack. | |
CVE-1999-1502 | | 1998-04-08 | Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server add… | |
CVE-1999-1505 | | 1998-04-07 | Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial conn… | |
CVE-1999-1229 | | 1998-02-25 | Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files v… | |
CVE-1999-1230 | | 1997-12-24 | Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to att… |