CVE

Id
50676  
CVE No.
CVE-2011-2764  
Status
Candidate  
Description
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin" Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.  
Phase
Assigned (20110719)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
547226 50676 CVE-2011-2764 BUGTRAQ:20110728 Two security issues fixed in ioQuake3 engine  View
547227 50676 CVE-2011-2764 URL:http://www.securityfocus.com/archive/1/archive/1/519051/100/0/threaded  View
547228 50676 CVE-2011-2764 FULLDISC:20110728 Two security issues fixed in ioQuake3 engine  View
547229 50676 CVE-2011-2764 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html  View
547230 50676 CVE-2011-2764 CONFIRM:http://svn.icculus.org/quake3?view=rev&revision=2098  View
547231 50676 CVE-2011-2764 CONFIRM:http://thilo.tjps.eu/download/patches/ioq3-svn-r2098.diff  View
547232 50676 CVE-2011-2764 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=725951  View
547233 50676 CVE-2011-2764 FEDORA:FEDORA-2011-9898  View
547234 50676 CVE-2011-2764 URL:http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063460.html  View
547235 50676 CVE-2011-2764 BID:48915  View
547236 50676 CVE-2011-2764 URL:http://www.securityfocus.com/bid/48915  View
547237 50676 CVE-2011-2764 SECUNIA:45539  View
547238 50676 CVE-2011-2764 URL:http://secunia.com/advisories/45539  View
547239 50676 CVE-2011-2764 SECUNIA:45540  View
547240 50676 CVE-2011-2764 URL:http://secunia.com/advisories/45540  View
547241 50676 CVE-2011-2764 SREASON:8324  View
547242 50676 CVE-2011-2764 URL:http://securityreason.com/securityalert/8324  View
547243 50676 CVE-2011-2764 XF:ioquake-gamecode-code-execution(68870)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33273 JVNDB-2011-003513 Tor におけるブリッジを列挙される脆弱性 Tor は、ブリッジとして構成される場合、開始した OR 接続内のセルの Command フィールドで CREATE および CREATE_FAST の値を受け取るため、ブリッジを列挙される脆弱性が存在します。 CVE-2011-2769 50676 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003513.html  View