| Package | Affected versions | Patched versions |
|---|---|---|
| quake 3 engine | = 1.32b= 1.32c= icculus_803= icculus_804 |
The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free