Critical: Highly critical Impact: Spoofing, Manipulation of data, Exposure of sensitive information, DoS, System access Where: From remote Solution Status: Unpatched

Software: Quake2 Engine 2.x

Multiple vulnerabilities have been reported in Quake2 engine, which can be exploited by malicious people to cause a DoS (Denial of Service), potentially execute arbitrary code, disclose sensitive information, conduct spoofing attacks, and corrupt server data for other clients….

The vulnerabilities have been reported in version 3.2.x of the released open source version. Other versions may also be affected.

Solution: Host only games on trusted networks.