PT-2006-3204 · Id · Quake Iii Arena+3

Landser · Published 2006-05-08 · Updated 2024-06-15 · CVE-2006-2236

Positive Technologies (AI Summary)

CVSS v2.0

7.6

High

Base vector

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Quake III Arena version 1.32b ET version 2.60 Return to Castle Wolfenstein version 1.41

Description The issue is a buffer overflow in the Quake 3 Engine. This allows remote attackers to execute arbitrary commands via a long remapShader command.

Recommendations For Quake III Arena version 1.32b, consider disabling the remapShader command until a patch is available. For ET version 2.60, restrict access to the remapShader functionality to minimize the risk of exploitation. For Return to Castle Wolfenstein version 1.41, avoid using the remapShader command in the affected API endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2006-2236

OPENSUSE-SU-2024:10863-1

Affected Products

Et

Quake 3 Engine

Quake Iii Arena

Return To Castle Wolfenstein

References · 16

• 🔥 http://securityfocus.com/bid/17857 · Exploit
• 🔥 https://exploit-db.com/exploits/1750 · Exploit
• http://gentoo.org/security/en/glsa/glsa-200605-12.xml · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2006-2236 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:10863-1 · Vendor Advisory
• http://secunia.com/advisories/19984 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2006-2236 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2006-2236 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2006-2236 · Security Note
• https://suse.com/security/cve/CVE-2006-2082 · Note
• http://vupen.com/english/advisories/2006/1676 · Note
• http://osvdb.org/25279 · Note
• http://secunia.com/advisories/20065 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/26264 · Note
• http://securityfocus.com/archive/1/433349/100/0/threaded · Note