Quake3 Arena allows malicious server operators to read or modify files on a client via a dot dot (..) attack.
id software quake 3 arena 1.16n