PT-2006-3204 · Id · Quake Iii Arena+3

Landser · Publicado 2006-05-08 · Atualizado 2024-06-15 · CVE-2006-2236

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Quake III Arena version 1.32b ET version 2.60 Return to Castle Wolfenstein version 1.41

Description The issue is a buffer overflow in the Quake 3 Engine. This allows remote attackers to execute arbitrary commands via a long remapShader command.

Recommendations For Quake III Arena version 1.32b, consider disabling the remapShader command until a patch is available. For ET version 2.60, restrict access to the remapShader functionality to minimize the risk of exploitation. For Return to Castle Wolfenstein version 1.41, avoid using the remapShader command in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2006-2236

OPENSUSE-SU-2024:10863-1

Produtos afetados

Et

Quake 3 Engine

Quake Iii Arena

Return To Castle Wolfenstein

Referências · 16

• 🔥 http://securityfocus.com/bid/17857 · Exploit
• 🔥 https://exploit-db.com/exploits/1750 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200605-12.xml · Aviso do Fabricante
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2236 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2082 · Nota
• http://vupen.com/english/advisories/2006/1676 · Nota
• http://osvdb.org/25279 · Nota
• http://secunia.com/advisories/20065 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26264 · Nota
• https://osv.dev/vulnerability/openSUSE-SU-2024:10863-1 · Aviso do Fabricante
• http://securityfocus.com/archive/1/433349/100/0/threaded · Nota
• http://secunia.com/advisories/19984 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2006-2236 · Aviso do Fabricante
• https://suse.com/security/cve/CVE-2006-2236 · Nota
• https://security-tracker.debian.org/tracker/CVE-2006-2236 · Aviso do Fabricante