CVE-2006-2236

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

7.59%

Published

May 8, 2006

Modified

Jun 16, 2026

Public PoC / Exploit (2)

All weaponized →

Exploit-DBQuake 3 Engine 1.32b - 'R_RemapShader()' Remote Client Buffer Overflow TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Buffer overflow in the Quake 3 Engine, as used by (1) ET 2.60, (2) Return to Castle Wolfenstein 1.41, and (3) Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command.

Affected Products (4)

id_software · quake_3_arenavulnerable

id_software · quake_3_enginevulnerable

id_software · return_to_castle_wolfensteinvulnerable

id_software · wolfenstein_enemy_territoryvulnerable

References (18)

http://secunia.com/advisories/19984

PatchVendor Advisory

http://secunia.com/advisories/20065

http://www.gentoo.org/security/en/glsa/glsa-200605-12.xml

http://www.osvdb.org/25279

http://www.securityfocus.com/archive/1/433349/100/0/threaded

http://www.securityfocus.com/bid/17857

Exploit

http://www.vupen.com/english/advisories/2006/1676

https://exchange.xforce.ibmcloud.com/vulnerabilities/26264

https://www.exploit-db.com/exploits/1750