$ cve CVE-2006-3325 JSON

CVE-2006-3325 EXPLOIT

5.0

MEDIUM · CVSS 2.0 · EPSS 4.8% (pctl 92)

Patch early

A public exploit exists.

Description

client/cl_parse.c in the id3 Quake 3 Engine 1.32c and the Icculus Quake 3 Engine (ioquake3) revision 810 and earlier allows remote malicious servers to overwrite arbitrary write-protected cvars variables on the client, such as cl_allowdownload for Automatic Downloading and fs_homepath for the quake3 path, via a string of cvar names and values sent from the server. NOTE: this can be combined with another vulnerability to overwrite arbitrary files.

Scoring

CVSS	5.0 (MEDIUM, v2.0)
Vector	AV:N/AC:L/Au:N/C:N/I:P/A:N
EPSS	4.76% — more likely to be exploited than 92% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2006-06-30
Last modified	2026-06-16

Affected (1)

Vendor	Product
id software	quake 3 engine

Public exploits

Source	Title	Date
exploit-db	Quake 3 Engine Client - 'CG_ServerCommand()' Remote Overflow	2006-07-02
exploit-db	Quake 3 Engine Client (Windows x86) - CS_ITEms Remote Overflow	2006-07-02

References

→ the Explorer · watch your stack · NVD