CVE-1999-1502

Published Apr 8, 1998

Last updated 3 months ago

Overview

Description: Buffer overflows in Quake 1.9 client allows remote malicious servers to execute arbitrary commands via long (1) precache paths, (2) server name, (3) server address, or (4) argument to the map console command.
Source: cve@mitre.org
NVD status: Modified

Risk scores

CVSS 2.0

Type: Primary
Base score: 7.5
Impact score: 6.4
Exploitability score: 10
Vector string: AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

nvd@nist.gov: NVD-CWE-Other

Hype score: Not currently trending

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:id_software:quake:1.9:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "61028BF2-6AF9-4145-B096-DA93E3197040"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]

References