CVE-2006-2875 Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download com...
HighCVSS 7.5
EPSS 6.8%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| id software quake 3 engine | <= 1.32c | No fix listed |
| debian/ioquake3(Debian:12) | < 1.36+svn1788j-1 | 1.36+svn1788j-1 |
| debian/ioquake3(Debian:13) | < 1.36+svn1788j-1 | 1.36+svn1788j-1 |
| debian/ioquake3(Debian:14) | < 1.36+svn1788j-1 | 1.36+svn1788j-1 |
References
- Debian Security Tracker CVE-2006-2875 vendor-advisory
- aluigi.altervista.org
- 20401 third-party-advisory vendor-advisory
- 1016219 vdb-entry
- 20060602 Client buffer-overflow in Quake 3 engine (1.32c / rev 795) mailing-list
- 18271 vdb-entry
- ADV-2006-2129 vdb-entry