IS
Vendor
ID Software
32
CVEs
0
On KEV
0
New 30D
Products
Q3–
Quake 3 Engine
ID Software
9 CVEs0 on KEV0 new
Q3–
Quake 3 Arena
ID Software
4 CVEs0 on KEV0 new
QI–
Quake II Server
ID Software
4 CVEs0 on KEV0 new
QU–
Quake
ID Software
3 CVEs0 on KEV0 new
WE–
Wolfenstein Enemy Territory
ID Software
2 CVEs0 on KEV0 new
D3–
Doom 3
ID Software
1 CVEs0 on KEV0 new
Q2–
Quake 2
ID Software
1 CVEs0 on KEV0 new
Q2–
Quake 2 Server
ID Software
1 CVEs0 on KEV0 new
Q2–
Quake 2i Server
ID Software
1 CVEs0 on KEV0 new
Q3–
Quake 3 Arena Server
ID Software
1 CVEs0 on KEV0 new
Q4–
Quake 4
ID Software
1 CVEs0 on KEV0 new
QI–
Quake II Server Linux
ID Software
1 CVEs0 on KEV0 new
QI–
Quake II Server Windows
ID Software
1 CVEs0 on KEV0 new
QU–
Quakeworld
ID Software
1 CVEs0 on KEV0 new
RT–
Return TO Castle Wolfenstein
ID Software
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2007-5248 | D3 Doom 3 ID Software | – | Oct 6 | Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster… |
| CVE-2006-3400 | Q3 Quake 3 Engine ID Software | – | Jul 6 | Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of… |
| CVE-2006-3401 | Q3 Quake 3 Engine ID Software | – | Jul 6 | Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly execute code via long… |
| CVE-2006-3325 | Q3 Quake 3 Engine ID Software | – | Jun 30 | client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary… |
| CVE-2006-3324 | Q3 Quake 3 Engine ID Software | – | Jun 30 | The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in… |
| CVE-2006-2875 | Q3 Quake 3 Engine ID Software | – | Jun 7 | Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code… |
| CVE-2006-2082 | Q3 Quake 3 Engine ID Software | – | May 10 | Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory, and Star Trek Voyager:… |
| CVE-2006-2236 | Q3 Quake 3 Arena ID Software | – | May 8 | Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary… |
| CVE-2005-0983 | Q3 Quake 3 Arena ID Software | – | May 2 | Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes… |
| CVE-2005-0430 | Q3 Quake 3 Engine ID Software | – | Feb 12 | The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the server via a long… |
| CVE-2004-2595 | QI Quake II Server Linux ID Software | – | Dec 31 | Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of service (application… |
| CVE-2004-2592 | QI Quake II Server ID Software | – | Dec 31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that asks the server to… |
| CVE-2004-2593 | QI Quake II Server ID Software | – | Dec 31 | Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (crash) and… |
| CVE-2004-2594 | QI Quake II Server Windows ID Software | – | Dec 31 | Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files via a "\/" in a… |
| CVE-2004-2596 | QI Quake II Server ID Software | – | Dec 31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large number of connections… |
| CVE-2004-2597 | QI Quake II Server ID Software | – | Dec 31 | Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already contains an "ip"… |
| CVE-2002-0770 | Q2 Quake 2i Server ID Software | – | Aug 12 | Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin commands via a client… |
| CVE-2001-1289 | Q3 Quake 3 Arena ID Software | – | Jul 29 | Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters |
| CVE-1999-1569 | QU Quake ID Software | – | Jul 17 | Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP connection packets, which… |
| CVE-2000-1080 | QU Quake ID Software | – | Nov 1 | Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet |
| CVE-2000-0303 | Q3 Quake 3 Arena ID Software | – | May 3 | Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack |
| CVE-1999-1502 | QU Quake ID Software | – | Apr 8 | Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4)… |
| CVE-1999-1505 | QU Quakeworld ID Software | – | Apr 7 | Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial connect packet |
| CVE-1999-1229 | Q2 Quake 2 Server ID Software | – | Feb 25 | Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files via a symlink from… |
| CVE-1999-1230 | Q2 Quake 2 ID Software | – | Dec 24 | Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to attempt to connect to… |