https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-07T23:11:18.395854+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2011-3012 fkie_cve-2011-3012 2026-10-07T23:11:19.022366+00:00

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.

 https://vulnerability.circl.lu/vuln/ghsa-w7ch-3pxv-5g4m GHSA-w7ch-3pxv-5g4m 2026-10-07T23:11:19.022455+00:00

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.

 https://vulnerability.circl.lu/vuln/gsd-2011-3012 gsd-2011-3012 2026-10-07T23:11:19.022493+00:00 gsd-2011-3012 https://vulnerability.circl.lu/vuln/ubuntu-cve-2011-3012 UBUNTU-CVE-2011-3012 2026-10-07T23:11:19.022517+00:00

Affected: Ubuntu:16.04:LTS: ioquake3, Ubuntu:18.04:LTS: ioquake3, Ubuntu:20.04:LTS: ioquake3, Ubuntu:22.04:LTS: ioquake3, Ubuntu:24.04:LTS: ioquake3, Ubuntu:25.10: ioquake3, Ubuntu:26.04:LTS: ioquake3

The ioQuake3 engine, as used in World of Padman 1.2 and earlier, Tremulous 1.1.0, and ioUrbanTerror 2007-12-20, does not check for dangerous file extensions before writing to the quake3 directory, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file, a different vulnerability than CVE-2011-2764.