Two independent vulnerabilities (client and server side) have been discovered in the Quake3 engine and many derived games.