ioquake3 records
7 published records for vendor ioquake3.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 3
- With a fix record
- 100%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-20 Improper Input Validation4
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer1
- CWE-59 Improper Link Resolution Before File Access ('Link Following')1
The weakness classes this vendor ships most often: where to look.
CWEAttack profile
All records
7 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
43Plan | CVE-2011-2764No exploit | The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin'ioquake3 · ioquake3 engine · CWE-20 | Critical10.0 | — | 8.6% | Aug 3, 2011 |
42Plan | CVE-2011-3012No exploit | The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerousioquake3 · ioquake3 engine · CWE-20 | Critical10.0 | — | 7.9% | Aug 9, 2011 |
40Plan | CVE-2017-11721No exploit | Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unspioquake3 · ioquake3 · CWE-119 | Critical9.8 | — | 2.5% | Aug 3, 2017 |
32Monitor | CVE-2010-5077No exploit | server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cauioquake3 · ioquake3 engine · CWE-20 | High7.8 | — | 2.1% | Oct 27, 2014 |
31Monitor | CVE-2011-1412No exploit | sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16ioquake3 · ioquake3 engine · CWE-20 | High7.5 | — | 4.2% | Aug 3, 2011 |
31Monitor | CVE-2017-6903No exploit | In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions.ioquake3 · ioquake3 | High7.8 | — | 1.2% | Mar 14, 2017 |
22Monitor | CVE-2012-3345No exploit | ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.ioquake3 · ioquake3 engine · CWE-59 | Medium5.6 | — | 0.2% | Jun 15, 2012 |
- CVE-2011-276443Plan
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin'
CriticalCVSS 10.0No exploitEPSS 8%ioquake3 · ioquake3 engineAug 3, 2011
- CVE-2011-301242Plan
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous
CriticalCVSS 10.0No exploitEPSS 7%ioquake3 · ioquake3 engineAug 9, 2011
- CVE-2017-1172140Plan
Buffer overflow in ioquake3 before 2017-08-02 allows remote attackers to cause a denial of service (application crash) or possibly have unsp
CriticalCVSS 9.8No exploitEPSS 2%ioquake3 · ioquake3Aug 3, 2017
- CVE-2010-507732Monitor
server/sv_main.c in Quake3 Arena, as used in ioquake3 before r1762, OpenArena, Tremulous, and other products, allows remote attackers to cau
HighCVSS 7.8No exploitEPSS 2%ioquake3 · ioquake3 engineOct 27, 2014
- CVE-2011-141231Monitor
sys/sys_unix.c in the ioQuake3 engine on Unix and Linux, as used in World of Padman 1.5.x before 1.5.1.1 and OpenArena 0.8.x-15 and 0.8.x-16
HighCVSS 7.5No exploitEPSS 4%ioquake3 · ioquake3 engineAug 3, 2011
- CVE-2017-690331Monitor
In ioquake3 before 2017-03-14, the auto-downloading feature has insufficient content restrictions.
HighCVSS 7.8No exploitEPSS 1%ioquake3 · ioquake3Mar 14, 2017
- CVE-2012-334522Monitor
ioquake3 before r2253 allows local users to overwrite arbitrary files via a symlink attack on the /tmp/ioq3.pid temporary file.
MediumCVSS 5.6No exploitEPSS 0%ioquake3 · ioquake3 engineJun 15, 2012