CVE-2004-1207 The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service...
MediumCVSS 5.0
EPSS 3.6%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| serioussam seriousengine | All versions | No fix listed |
References
- 20040929 Crash in Alpha Black Zero 1.04 mailing-list
- 20041128 Players overflow in Serious engine UDP (was Alpha Black Zero, 29 Sep 2004) mailing-list
- 12687 third-party-advisory
- 1011454 vdb-entry
- 11279 exploit vdb-entry
- alphablackzero-udp-packet-dos(17545) vdb-entry