Buffer overflow in conquest 7.2 and earlier may allow a local user to execute arbitrary code via a long environment variable.