Id Software Quake 3 Engine — known CVE vulnerabilities

Every CVE whose affected-product data names Id Software Quake 3 Engine, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (9)

• CVE-2006-2236 — CVSS 7.6 (high): Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows…
• CVE-2006-2082 — CVSS 7.5 (high): Directory traversal vulnerability in Quake 3 engine, as used in products including Quake3 Arena, Return to Castle Wolfenstein, Wolfenstein…
• CVE-2006-3401 — CVSS 7.5 (high): Stack-based buffer overflow in Quake 3 Engine as used by Quake 3: Arena 1.32b and 1.32c allows remote attackers to cause a denial of…
• CVE-2006-2875 — CVSS 7.5 (high): Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows…
• CVE-2006-3400 — CVSS 7.5 (high): Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows…
• CVE-2006-3324 — CVSS 5.0 (medium): The Automatic Downloading option in the id3 Quake 3 Engine and the Icculus Quake 3 Engine (ioquake3) before revision 804 allows remote…
• CVE-2006-3325 — CVSS 5.0 (medium): client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote…
• CVE-2005-0983 — CVSS 5.0 (medium): Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message…
• CVE-2005-0430 — CVSS 5.0 (medium): The Quake 3 engine, as used in multiple game packages, allows remote attackers to cause a denial of service (shutdown game server) and…