CVE-2011-2764

2011-08-0402:45:32

CWE-20

mitre

web.nvd.nist.gov

cve-2011-2764

fs_checkfilenameisnotexecutable

ioquake3

remote code execution

addon

nvd

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

AI Score

7.2

Confidence

Low

EPSS

0.108

Percentile

95.1%

JSON

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin’ Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.

Affected configurations

Nvd

Node

ioquake3ioquake3_engineRange≤1.36

ioquake3ioquake3_engineMatch1.36rc1

openarenaopenarena

smokin-gunssmokin\'_guns

tremuloustremulous

urbanterroriourbanterror

worldofpadmanworld_of_padman

VendorProductVersionCPE
ioquake3ioquake3_engine*cpe:2.3:a:ioquake3:ioquake3_engine:*:*:*:*:*:*:*:*
ioquake3ioquake3_engine1.36cpe:2.3:a:ioquake3:ioquake3_engine:1.36:rc1:*:*:*:*:*:*
openarenaopenarena*cpe:2.3:a:openarena:openarena:*:*:*:*:*:*:*:*
smokin-gunssmokin\'_guns*cpe:2.3:a:smokin-guns:smokin\'_guns:*:*:*:*:*:*:*:*
tremuloustremulous*cpe:2.3:a:tremulous:tremulous:*:*:*:*:*:*:*:*
urbanterroriourbanterror*cpe:2.3:a:urbanterror:iourbanterror:*:*:*:*:*:*:*:*
worldofpadmanworld_of_padman*cpe:2.3:a:worldofpadman:world_of_padman:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
ioquake3	ioquake3_engine	*	cpe:2.3:a:ioquake3:ioquake3_engine::::::::
ioquake3	ioquake3_engine	1.36	cpe:2.3:a:ioquake3:ioquake3_engine:1.36:rc1::::::
openarena	openarena	*	cpe:2.3:a:openarena:openarena::::::::
smokin-guns	smokin\'_guns	*	cpe:2.3:a:smokin-guns:smokin\'_guns::::::::
tremulous	tremulous	*	cpe:2.3:a:tremulous:tremulous::::::::
urbanterror	iourbanterror	*	cpe:2.3:a:urbanterror:iourbanterror::::::::
worldofpadman	world_of_padman	*	cpe:2.3:a:worldofpadman:world_of_padman::::::::