CVE

Id
50924  
CVE No.
CVE-2011-3012  
Status
Candidate  
Description
The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.  
Phase
Assigned (20110809)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
549500 50924 CVE-2011-3012 BUGTRAQ:20110728 Two security issues fixed in ioQuake3 engine  View
549501 50924 CVE-2011-3012 URL:http://www.securityfocus.com/archive/1/archive/1/519051/100/0/threaded  View
549502 50924 CVE-2011-3012 FULLDISC:20110728 Two security issues fixed in ioQuake3 engine  View
549503 50924 CVE-2011-3012 URL:http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html  View
549504 50924 CVE-2011-3012 CONFIRM:https://bugzilla.redhat.com/show_bug.cgi?id=725951  View
549505 50924 CVE-2011-3012 BID:48915  View
549506 50924 CVE-2011-3012 URL:http://www.securityfocus.com/bid/48915  View
549507 50924 CVE-2011-3012 SREASON:8324  View
549508 50924 CVE-2011-3012 URL:http://securityreason.com/securityalert/8324  View
549509 50924 CVE-2011-3012 XF:ioquake-gamecode-code-execution(68870)  View
549510 50924 CVE-2011-3012 URL:http://xforce.iss.net/xforce/xfdb/68870  View
549511 50924 CVE-2011-3012 XF:ioquake-file-extensions-code-execution(69164)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25780 JVNDB-2012-001487 Google Chrome におけるサービス運用妨害 (DoS) の脆弱性 Google Chrome は、データベースに関する処理に不備があるため、サービス運用妨害 (DoS) 状態となる、またはその他の詳細不明な影響を受ける脆弱性が存在します。 CVE-2011-3017 50924 7.5 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001487.html  View