PatchTheCVEquake 3 engine vulnerabilities and fixes
Recent CVEs affecting quake 3 engine, with upgrade or downgrade steps. 9 tracked.
Also searched as: quake3engine.
quake 3 engine has 9 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2006-07-06. Highest priority: CVE-2006-3401 (score 55/100).
- CVE-2006-3401 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attacker
- CVE-2006-3400 HIGH 7.5 DOWNGRADE DOWNGRADE Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2
- CVE-2006-3325 MEDIUM 5.0 DOWNGRADE client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and e
- CVE-2006-3324 MEDIUM 5.0 DOWNGRADE The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before re
- CVE-2006-2875 HIGH 7.5 UPGRADE Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in m
- CVE-2006-2236 HIGH 7.6 DOWNGRADE DOWNGRADE Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3)
- CVE-2006-2082 HIGH 7.5 MITIGATE Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Cas
- CVE-2005-0983 MEDIUM 5.0 DOWNGRADE DOWNGRADE Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client discon
- CVE-2005-0430 MEDIUM 5.0 MITIGATE The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (s
FAQ
How do I fix quake 3 engine vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is quake 3 engine being exploited right now?
None of the tracked quake 3 engine CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which quake 3 engine CVE should I patch first?
CVE-2006-3401 currently ranks highest (55/100): Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attacker.