Unscored severity · published May 8, 2006
CVE-2006-2236
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary…
–
CVSS
7.8%
EPSS
No
On KEV
Description
Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command.
Exploitation
Is it being used?
Exploit prediction (EPSS)7.8% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
Q3
Quake 3 Arena · ID Software
1.32b · source: NVD
Q3
Quake 3 Engine · ID Software
1.32b · source: NVD
RT
Return TO Castle Wolfenstein · ID Software
1.41 · source: NVD
WE
Wolfenstein Enemy Territory · ID Software
2.60 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-2236
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-2236
Patch
http://secunia.com/advisories/19984
secunia.com
http://secunia.com/advisories/20065
www.gentoo.org
http://www.gentoo.org/security/en/glsa/glsa-200605-12.xml
www.osvdb.org
http://www.osvdb.org/25279
www.securityfocus.com
http://www.securityfocus.com/archive/1/433349/100/0/threaded
Exploit
http://www.securityfocus.com/bid/17857
More from Quake 3 Arena
–
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes…
–
CVE-2001-1289
Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters
–
CVE-2000-0303
Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack