OSVDB ID: 25279

Title: Quake 3 Engine remapShader Command Overflow

Info

Disclosure
May 05, 2006

Discovery
Unknown

Dates

Exploit
May 05, 2006

Solution
Unknown

Description

 A remote overflow exists in the Quake 3 Engine. The Quake 3 Engine fails to perform proper bounds checking of the 'remapShader' command resulting in a buffer overflow. With a specially crafted request, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

 Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
Disclosure: Vendor Verified

Solution

 Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

id Software

Quake III Arena

 1.32b

Return to Castle Wolfenstein

 1.41

ET

 2.60

References

Credit
  • landser - landserhotmail.co.il -


Direct URL: http://osvdb.org/25279