ThreeZee Technology Security Advisory #TZT002 – GameSpy Arcade allows for arbitrary file writing due to a lack of file extension checking in the GSAPAK.exe binary.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/31475/tzt002.txt
Source: https://packetstormsecurity.com/files/31475/tzt002.txt.html