Ioquake3
7 CVEs across 2 Ioquake3 products. Browse Ioquake3 vulnerabilities, severities, and proof-of-concept exploits.
Ioquake3 products with known CVEs
Ioquake3 CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2017-11721 | Critical | 9.8 | 2017-08-03 | Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impac… |
CVE-2017-6903 | High | 7.8 | 2017-03-14 | In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions. This also affects Quake III Arena, OpenArena, OpenJK, iortcw… |
CVE-2010-5077 | | | 2014-10-27 | server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cause a denial of serv… |
CVE-2012-3345 | | | 2012-06-15 | ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file. |
CVE-2011-3012 | | | 2011-08-09 | The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions be… |
CVE-2011-2764 | | | 2011-08-04 | The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, T… |
CVE-2011-1412 | | | 2011-08-04 | sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16, allows remote gam… |