The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The FS_CheckFilenameIsNotExecutable function in qcommon/files.c in the ioQuake3 engine 1.36 and earlier, as used in World of Padman, Smokin' Guns, OpenArena, Tremulous, and ioUrbanTerror, does not properly determine dangerous file extensions, which allows remote attackers to execute arbitrary code via a crafted third-party addon that creates a Trojan horse DLL file.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Debian | — | Upgrade openarenaUpgrade ioquake3 | Jul 30, 2024 | Aug 4, 2011 |
| Gentoo Linux | — | Upgrade games-fps/urbanterror. | Oct 30, 2017 | Aug 3, 2011 |
| Ubuntu | — | No solution exists | Jun 26, 2025 | Aug 4, 2011 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub