The Doom 3 engine suffers from a format string vulnerability. Doom 3 versions 1.3.1 and below, Quake 4 versions 1.4.2 and below, and Prey versions 1.3 and below are affected.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/59723/d3engfspb.txt
Source: https://packetstormsecurity.com/files/59723/d3engfspb.txt.html