CVE-2006-3324

id3 Quake 3 Engine <804 - RCE

Title source: llm

Description

The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer.

Exploits (1)

exploitdb WORKING POC

cppdoswindows

https://www.exploit-db.com/exploits/1976

View Code ZIP pw:eip

References (10)

[Exploit] http://aluigi.altervista.org/adv/q3cfilevar-adv.txt

[Vendor Advisory] http://secunia.com/advisories/20401

[Vendor Advisory] http://secunia.com/advisories/20851

[Exploit] http://www.securityfocus.com/bid/18685

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/27486

[Various Sources] http://svn.icculus.org/quake3?rev=804&view=rev

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/438515/100/0/threaded

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/archive/1/438660/100/0/threaded

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/2569

[Third Party Advisory] http://securityreason.com/securityalert/1171

Scores

EPSS 0.0222

EPSS Percentile 84.6%

Details

Status published

Products (5)

id_software/quake_3_engine

id_software/quake_3_engine 1.32b

id_software/quake_3_engine 1.32c

id_software/quake_3_engine icculus_803

id_software/quake_3_engine icculus_804

Published Jun 30, 2006

Tracked Since Feb 18, 2026