CVE-2011-2764: Input Validation
First published: Thu Aug 04 2011(Updated: )
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Urban Terror | ||
| ioQuake3 | =1.36-rc1 | |
| Tremulous | ||
| ioQuake3 | <=1.36 | |
| Smokin' Guns | ||
| World of Padman | ||
| npm |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://thilo.tjps.eu/download/patches/ioq3-svn-r2098.diff
- http://www.securityfocus.com/bid/48915
- https://bugzilla.redhat.com/show_bug.cgi?id=725951
- http://archives.neohapsis.com/archives/fulldisclosure/2011-07/0338.html
- http://svn.icculus.org/quake3?view=rev&revision=2098
- http://lists.fedoraproject.org/pipermail/package-announce/2011-August/063460.html
- http://secunia.com/advisories/45540
- http://secunia.com/advisories/45539
- http://securityreason.com/securityalert/8324
- https://security.gentoo.org/glsa/201706-23
- https://exchange.xforce.ibmcloud.com/vulnerabilities/68870
- http://www.securityfocus.com/archive/1/519051/100/0/threaded
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/remedy
- agent/weakness
- agent/last-modified-date
- agent/severity
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/urbanterror
- canonical/urban terror
- vendor/ioquake3
- canonical/ioquake3
- version/ioquake3/1.36-rc1
- vendor/tremulous
- canonical/tremulous
- version/ioquake3/1.36
- vendor/smokin-guns
- canonical/smokin' guns
- vendor/worldofpadman
- canonical/world of padman
- vendor/openarena
- canonical/npm