Beveiligingsadvies

CVE-2011-2764

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2011-08-04 01:00:00

Laatst bijgewerkt 2024-08-06 23:15:30

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.

← Alle CVE's bekijken Bekijk op cve.org ↗