Luigi Auriemma has reported two vulnerabilities in Icculus.org Quake3, which can be exploited by malicious people to bypass certain security restrictions, cause a DoS (Denial of Service), and potentially to compromise a user's system.

1) An error exists within the Automatic Downloading functionality when handling filenames of PK3 files sent by the server.

For more information see #2 in:
SA20401

2) An error exists within the client when handling the list of cvar variables sent from a server.

For more information see #3 in:
SA20401

The vulnerabilities have been reported in revision 803. Prior versions may also be affected.

Solution
The vulnerabilities have been fixed in revision 811 and later.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://aluigi.altervista.org/adv/q3cfilevar-adv.txt
http://svn.icculus.org/quake3?rev=804&view=rev

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers