CVE:CVE-2011-3012
CNNVD:CNNVD-201108-155
ioQuake3是雷神之锤3引擎的修改版本。
在World of Padman 1.2及早期版本，Tremulous 1.1.0版本以及ioUrbanTerror 2007-12-20中使用的ioQuake3引擎在写入quake3目录之前没有检查危险文件扩展名。远程攻击者可借助创建Trojan木马DLL文件的特制第三方插件执行任意代码。
solution:Upgrade ioquake3 ioquake3_engine to a higher version than *; Upgrade tremulous tremulous to a higher version than 1.1.0,and avoid the version 1.1.0; Upgrade urbanterror iourbanterror to a higher version than 2007-12-20,and avoid the version 2007-12-20; Upgrade worldofpadman world_of_padman to a higher version than 1.2,and avoid the version (,1.2]