Skip to content

CVE-2001-1289

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a...

5.0 MediumPublic exploit

CVE-2001-1289 is a medium vulnerability (CVSS 5.0) in Id Software Quake 3 Arena, published July 29, 2001. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 5.21%, the 92nd percentile. No source names a fixed version.

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.

Exploit likelihood

5.21%Up 1.0 points since Feb 4, 2022

What each source reports

NVD Score used 5.0

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.

Record: CVE-2001-1289
CVSS 2.0: 5.0 MediumAV:N/AC:L/Au:N/C:N/I:N/A:P
Updated: 2026-11-02

CVE List No score

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.

Record: CVE-2001-1289
Updated: 2026-11-02

EUVDEUVD-2001-1270 No score

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.

Record: EUVD-2001-1270
Updated: 2026-11-03

GitHub AdvisoriesGHSA-vm5m-3h39-r4cm No score

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a...

Quake 3 arena 1.29f and 1.29g allows remote attackers to cause a denial of service (crash) via a malformed connection packet that begins with several char-255 characters.

Record: GHSA-vm5m-3h39-r4cm
Updated: 2026-11-02

Affected products

id software quake 3 arena

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	id Software Quake 3 Arena Server 1.29 - Buffer Overflow	2001-07-29

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References