Lucene search
Ubuntu.comUB:CVE-2011-2764HistoryAug 04, 2011 - 12:00 a.m.
CVE-2011-2764
2011-08-0400:00:00
ubuntu.com
ubuntu.com
6
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.108
Percentile
95.1%
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the
ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin’ Guns,
OpenArena, Tremulous, and ioUrbanTerror, does not properly determine
dangerous file extensions, which allows remote attackers to execute
arbitrary code via a crafted third-party addon that creates a Trojan horse
DLL file.
Related
cvelist
cvelist
CVE-2011-2764
2011-08-04 01:00:00
CVE-2011-3012
2011-08-09 20:00:00
debiancve
debiancve
CVE-2011-2764
2011-08-04 02:45:32
CVE-2011-3012
2011-08-09 20:55:00
openvas
openvas
Fedora Update for tremulous FEDORA-2012-2238
2012-08-30 00:00:00
Fedora Update for tremulous FEDORA-2012-2238
2012-08-30 00:00:00
Fedora Update for openarena FEDORA-2011-9898
2011-08-12 00:00:00
fedora
fedora
[SECURITY] Fedora 17 Update: tremulous-1.2.0-0.4.beta1.fc17
2012-02-28 10:58:37
[SECURITY] Fedora 15 Update: tremulous-1.2.0-0.4.beta1.fc15
2012-03-08 04:57:53
[SECURITY] Fedora 14 Update: quake3-1.36-11.svn2102.fc14
2011-08-09 01:22:03
prion
prion
Code injection
2011-08-04 02:45:00
Design/Logic Flaw
2011-08-09 20:55:00
nessus
nessus
Fedora 17 : tremulous-1.2.0-0.4.beta1.fc17 (2012-2238)
2012-02-29 00:00:00
Fedora 16 : tremulous-1.2.0-0.4.beta1.fc16 (2012-2419)
2012-03-08 00:00:00
Fedora 15 : tremulous-1.2.0-0.4.beta1.fc15 (2012-2405)
2012-03-08 00:00:00
cve
cve
CVE-2011-2764
2011-08-04 02:45:32
CVE-2011-3012
2011-08-09 20:55:00
nvd
nvd
CVE-2011-2764
2011-08-04 02:45:32
CVE-2011-3012
2011-08-09 20:55:00
securityvulns
securityvulns
ioQuake3 game engine security vulnerabilities
2011-08-01 00:00:00
Two security issues fixed in ioQuake3 engine
2011-08-01 00:00:00
packetstorm
packetstorm
Quake 3 Shell Injection / Code Execution
2011-07-29 00:00:00
ubuntucve
ubuntucve
CVE-2011-3012
2011-08-09 00:00:00
gentoo
gentoo
Urban Terror: Multiple vulnerabilities
2017-06-22 00:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS
0.108
Percentile
95.1%
Related for UB:CVE-2011-2764