| Package | Affected versions | Patched versions |
|---|---|---|
| quake 3 engine | ≤ 1.32c |
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free