Unscored severity · published Jul 29, 2001
CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters
–
CVSS
5.2%
EPSS
No
On KEV
Description
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.
Exploitation
Is it being used?
Exploit prediction (EPSS)5.2% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
Q3
Quake 3 Arena · ID Software
1.29f; 1.29g · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1289
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1289
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-07/0748.html
www.securityfocus.com
http://www.securityfocus.com/bid/3123
More from Quake 3 Arena
–
CVE-2006-2236
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary…
–
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes…
–
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack