• info
• discussion
• exploit
• solution
• references

Quake Precache Path Buffer Overflow Vulnerability

The exists a buffer overflow in the Quake client.
As part of the network protocol between the
Quake client and server, the server gives the client
a list of precache paths. This arbiitrary length string
is copied by the client into a 64 byte buffer on the stack.