296,317
Total vulnerabilities in the database
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion.
| Software | From | Fixed in |
|---|---|---|
| id_software / quake_3_engine | - | 1.32c.x |