CVE-2006-3324
CVE-2006-3324 is a medium-severity vulnerability in Id Software Quake 3 Engine with a CVSS 2.0 base score of 5.0. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: Medium (CVSS 2.0 base score 5.0)
- EPSS exploit prediction: 4% (90th percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Id Software Quake 3 Engine
- Published:
- Last modified:
Description
The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer.
Frequently asked questions
- What is CVE-2006-3324?
- The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote attackers to overwrite arbitrary files in the quake3 directory (fs_homepath cvar) via a long string of filenames, as contained in the neededpaks buffer.
- How severe is CVE-2006-3324?
- CVE-2006-3324 has a CVSS 2.0 base score of 5.0, rated medium severity.
- Is CVE-2006-3324 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (90th percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2006-3324?
- CVE-2006-3324 primarily affects Id Software Quake 3 Engine. In total, 5 product configurations (CPEs) are listed as vulnerable; see the affected-products list for the exact versions.
- How do I fix CVE-2006-3324?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround.
- When was CVE-2006-3324 published?
- CVE-2006-3324 was published on 2006-06-30 and last updated on 2026-06-16.
References
- http://aluigi.altervista.org/adv/q3cfilevar-adv.txt
- http://secunia.com/advisories/20401
- http://secunia.com/advisories/20851
- http://securityreason.com/securityalert/1171
- http://svn.icculus.org/quake3?rev=804&view=rev
- http://www.securityfocus.com/archive/1/438515/100/0/threaded
- http://www.securityfocus.com/archive/1/438660/100/0/threaded
- http://www.securityfocus.com/bid/18685
- http://www.vupen.com/english/advisories/2006/2569
- https://exchange.xforce.ibmcloud.com/vulnerabilities/27486
Affected products (5)
- cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*
- cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*
- cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*
- cpe:2.3:a:id_software:quake_3_engine:icculus_803:*:*:*:*:*:*:*
- cpe:2.3:a:id_software:quake_3_engine:icculus_804:*:*:*:*:*:*:*
More vulnerabilities in Id Software Quake 3 Engine
- CVE-2006-2236 — High (CVSS 7.6): Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III…
- CVE-2006-3401 — High (CVSS 7.5): Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to…
- CVE-2006-3400 — High (CVSS 7.5): Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP)…
- CVE-2006-2875 — High (CVSS 7.5): Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple…
- CVE-2006-2082 — High (CVSS 7.5): Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle…
- CVE-2006-3325 — Medium (CVSS 5.0): client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier…