CVE-2006-2875
EPSS 6.1%Published: 6/7/2006Modified: 4/28/2026
Also known as:DEBIAN-CVE-2006-2875
Description
Stack-based buffer overflow in the CL_ParseDownload function of Quake 3 Engine 1.32c and earlier, as used in multiple products, allows remote attackers to execute arbitrary code via a svc_download command with compressed data that triggers the overflow during expansion.
Affected packages (1)
- Debian/ioquake3from 0, < 1.36+svn1788j-1