NVD

Id
9495  
Name
CVE-2011-2764  
Description
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin" Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-08-03  
Modified Date
2011-09-21  
Seq
2011-2764  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
54284 9495 CVE-2011-2764 20110728 Two security issues fixed in ioQuake3 engine  View
54285 9495 CVE-2011-2764 FEDORA-2011-9898  View
54286 9495 CVE-2011-2764 8324  View
54287 9495 CVE-2011-2764 http://svn.icculus.org/quake3?view=rev&revision=2098  View
54288 9495 CVE-2011-2764 http://thilo.tjps.eu/download/patches/ioq3-svn-r2098.diff  View
54289 9495 CVE-2011-2764 20110728 Two security issues fixed in ioQuake3 engine  View
54290 9495 CVE-2011-2764 48915  View
54291 9495 CVE-2011-2764 ioquake-gamecode-code-execution(68870)  View
54292 9495 CVE-2011-2764 https://bugzilla.redhat.com/show_bug.cgi?id=725951  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34571 JVNDB-2011-004813 World of Padman などの製品で使用される ioQuake3 エンジンの FS_CheckFilenameIsNotExecutable 関数における任意のコードを実行される脆弱性 World of Padman、Smokin" Guns、OpenArena、Tremulous および ioUrbanTerror で使用される ioQuake3 エンジンの qcommon/files.c の FS_CheckFilenameIsNotExecutable 関数は、危険なファイルの拡張子を適切に判断しないため、任意のコードを実行される脆弱性が存在します。 CVE-2011-2764 50671 CVE-2011-2764 9495 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004813.html 2011-08-03 2012-03-27 View