CVE:CVE-2011-2764
CNNVD:CNNVD-201107-464
在World of Padman，Smokin' Guns，OpenArena，Tremulous和ioUrbanTerror中使用的ioQuake3引擎的qcommon/files.c中的FS_CheckFilenameIsNotExecutable函数不能正确确定危险文件的扩展名。远程攻击者可借助创建了Trojan木马DLL文件的第三方插件执行任意代码。
solution:Upgrade ioquake3 ioquake3_engine to a higher version than 1.36,1.36:rc1,and avoid the version (,1.36],1.36:rc1; Upgrade openarena openarena to a higher version than *; Upgrade smokin-guns smokin'_guns to a higher version than *; Upgrade tremulous tremulous to a higher version than *; Upgrade urbanterror iourbanterror to a higher version than *; Upgrade worldofpadman world_of_padman to a higher version than *