Id Software - vulnerabilities (CVEs)

25 CVEs in 15 products, 0 in the last 30 days, newest from 2007-10-06.

Products

Newest CVEs of Id Software

CVE-2007-5248 - CVSS 9.3 (critical), 2007-10-06: Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and…
CVE-2006-3401 - CVSS 7.5 (high), 2006-07-06: Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of service and possibly…
CVE-2006-3400 - CVSS 7.5 (high), 2006-07-06: Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to…
CVE-2006-3324 - CVSS 5 (medium), 2006-06-30: The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite…
CVE-2006-3325 - CVSS 5 (medium), 2006-06-30: client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to…
CVE-2006-2875 - CVSS 7.5 (high), 2006-06-07: Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to…
CVE-2006-2082 - CVSS 7.5 (high), 2006-05-10: Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein: Enemy Territory,…
CVE-2006-2236 - CVSS 7.6 (high), 2006-05-08: Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to…
CVE-2005-0983 - CVSS 5 (medium), 2005-05-02: Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly…
CVE-2005-0430 - CVSS 5 (medium), 2005-02-12: The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and possibly crash the…
CVE-2004-2596 - CVSS 5 (medium), 2004-12-31: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (exhaustion of connection slots) via a large…
CVE-2004-2594 - CVSS 5 (medium), 2004-12-31: Absolute path traversal vulnerability in Quake II server before R1Q2 on Windows, as used in multiple products, allows remote attackers to read arbitrary files…
CVE-2004-2593 - CVSS 7.5 (high), 2004-12-31: Buffer overflow in command-packet processing of Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of…
CVE-2004-2595 - CVSS 5 (medium), 2004-12-31: Absolute path traversal vulnerability in Quake II server before R1Q2 on Linux, as used in multiple products, allows remote attackers to cause a denial of…
CVE-2004-2592 - CVSS 5 (medium), 2004-12-31: Quake II server before R1Q2, as used in multiple products, allows remote attackers to cause a denial of service (application crash) via a modified client that…
CVE-2004-2597 - CVSS 5 (medium), 2004-12-31: Quake II server before R1Q2, as used in multiple products, allows remote attackers to bypass IP-based access control rules via a userinfo string that already…
CVE-2002-0770 - CVSS 5 (medium), 2002-08-12: Quake 2 (Q2) server 3.20 and 3.21 allows remote attackers to obtain sensitive server cvar variables, obtain directory listings, and execute Q2 server admin…
CVE-2001-1289 - CVSS 5 (medium), 2001-07-29: Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255…
CVE-1999-1569 - CVSS 5 (medium), 2001-07-17: Quake 1 and NetQuake servers allow remote attackers to cause a denial of service (resource exhaustion or forced disconnection) via a flood of spoofed UDP…
CVE-2000-1080 - CVSS 5 (medium), 2000-11-01: Quake 1 (quake1) and ProQuake 1.01 and earlier allow remote attackers to cause a denial of service via a malformed (empty) UDP packet.
CVE-2000-0303 - CVSS 6.4 (medium), 2000-05-03: Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
CVE-1999-1502 - CVSS 7.5 (high), 1998-04-08: Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server…
CVE-1999-1505 - CVSS 7.5 (high), 1998-04-07: Buffer overflow in QuakeWorld 2.10 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary commands via a long initial…
CVE-1999-1229 - CVSS 2.1 (low), 1998-02-25: Quake 2 server 3.13 on Linux does not properly check file permissions for the config.cfg configuration file, which allows local users to read arbitrary files…
CVE-1999-1230 - CVSS 5 (medium), 1997-12-24: Quake 2 server allows remote attackers to cause a denial of service via a spoofed UDP packet with a source address of 127.0.0.1, which causes the server to…