A vulnerability has been reported in Nexuiz, which can be exploited by malicious people to disclose sensitive information or manipulate data.

The vulnerability is caused due to an error in the client when handling the "gamedir" command. This can be exploited by a malicious game server to read arbitrary files and write to certain files on a user's system.

The vulnerability affects Nexuiz client 2.2.2.

Solution
Update to version 2.2.3.

Provided and/or discovered by
Reported by the vendor.

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.alientrap.org/devwiki/index.php?n=Nexuiz.Patch

Deep Links
Links available to Secunia VIM customers