Debian Linux Security Advisory 3812-1 - It was discovered that ioquake3, a modified version of the ioQuake3 game engine performs insufficient restrictions on automatically downloaded content (pk3 files or game code), which allows malicious game servers to modify configuration settings including driver settings.
8378ab80dd27749083fe4b98e31ccf1ebab11bdc2b1bc6451aeabebc7705c473