CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to
cause a denial of service (client disconnect) via a long message, which
is not properly truncated and causes the engine to process the remaining
data as if it were network data.
Luigi Auriemma q3msgboom
from Tim Angus in ioquake
svn 95 git 33a48a0336865a9d21983e4836920cd9f3401101
Fixed q3msgboom
from http://www.quakesrc.org/forums/viewtopic.php?t=5374
CVE-2005-0430
The Quake 3 engine, as used in multiple game packages, allows remote
attackers to cause a denial of service (shutdown game server) and
possibly crash the server via a long infostring, possibly triggering a
buffer overflow.
Luigi Auriemma q3infoboom
bugzilla #2356
from Thilo Schulz in ioquake3
svn 58 git 01da6d757bb3121c9ee077e7269eee7655abd05b
https://bugzilla.icculus.org/show_bug.cgi?id=2356
Remotely exploitable Infostring Crash
