PatchTheCVEid software vulnerabilities
Recent CVEs affecting id software products. 21 tracked.
id software has 21 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2007-10-06. Highest priority: CVE-2007-5248 (score 61/100).
- CVE-2007-5248 HIGH 9.3 UPGRADE UPGRADE Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier,
- CVE-2006-3401 HIGH 7.5 DOWNGRADE Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attacker
- CVE-2006-3400 HIGH 7.5 DOWNGRADE DOWNGRADE Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2
- CVE-2006-3325 MEDIUM 5.0 DOWNGRADE client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and e
- CVE-2006-3324 MEDIUM 5.0 DOWNGRADE The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before re
- CVE-2006-2875 HIGH 7.5 UPGRADE Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in m
- CVE-2006-2236 HIGH 7.6 DOWNGRADE DOWNGRADE Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3)
- CVE-2006-2082 HIGH 7.5 MITIGATE Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Cas
- CVE-2005-0983 MEDIUM 5.0 DOWNGRADE DOWNGRADE Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client discon
- CVE-2005-0430 MEDIUM 5.0 MITIGATE The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (s
- CVE-2004-2597 MEDIUM 5.0 DOWNGRADE Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access c
- CVE-2004-2596 MEDIUM 5.0 DOWNGRADE Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of servic
- CVE-2004-2595 MEDIUM 5.0 DOWNGRADE Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, a
- CVE-2004-2594 MEDIUM 5.0 DOWNGRADE Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products,
- CVE-2004-2593 HIGH 7.5 DOWNGRADE Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, all
- CVE-2004-2592 MEDIUM 5.0 DOWNGRADE Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of servic
- CVE-2002-0770 MEDIUM 5.0 DOWNGRADE Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain di
- CVE-2001-1289 MEDIUM 5.0 DOWNGRADE Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed con
- CVE-2000-1080 MEDIUM 5.0 DOWNGRADE DOWNGRADE Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malfo
- CVE-2000-0303 MEDIUM 6.4 DOWNGRADE Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
- CVE-1999-1569 MEDIUM 5.0 DOWNGRADE Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or force
FAQ
How do I fix id software vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is id software being exploited right now?
None of the tracked id software CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which id software CVE should I patch first?
CVE-2007-5248 currently ranks highest (61/100): Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, .