CVE-2011-3012 The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, whi...
HighCVSS 10.0
EPSS 8.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ubuntu/ioquake3(Ubuntu:22.04) | All versions | No fix listed |
| debian/ioquake3(Debian:12) | < 1.36+svn1946-4 | 1.36+svn1946-4 |
| debian/ioquake3(Debian:13) | < 1.36+svn1946-4 | 1.36+svn1946-4 |
| debian/ioquake3(Debian:14) | < 1.36+svn1946-4 | 1.36+svn1946-4 |
| debian/openarena(Debian:12) | < 0.8.5-5+exp1 | 0.8.5-5+exp1 |
| debian/openarena(Debian:13) | < 0.8.5-5+exp1 | 0.8.5-5+exp1 |
| debian/openarena(Debian:14) | < 0.8.5-5+exp1 | 0.8.5-5+exp1 |
| ioquake3 engine | All versions | No fix listed |
| tremulous | = 1.1.0 | No fix listed |
| urbanterror iourbanterror | = 2007-12-20 | No fix listed |
| worldofpadman world of padman | <= 1.2 | No fix listed |
| ubuntu/ioquake3(Ubuntu:24.04) | All versions | No fix listed |
| ubuntu/ioquake3(Ubuntu:26.04) | All versions | No fix listed |
| ubuntu/ioquake3(Ubuntu:26.10) | All versions | No fix listed |
References
- Ubuntu CVE tracker vendor-advisory
- www.cve.org
- Debian Security Tracker CVE-2011-3012 vendor-advisory
- 20110728 Two security issues fixed in ioQuake3 engine exploit mailing-list
- 8324 third-party-advisory
- 20110728 Two security issues fixed in ioQuake3 engine mailing-list
- 48915 vdb-entry
- bugzilla.redhat.com patch
- ioquake-gamecode-code-execution(68870) vdb-entry
- ioquake-file-extensions-code-execution(69164) vdb-entry
- GLSA-201706-23 vendor-advisory