CVE-2005-0983 Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process...
MediumCVSS 5.0
EPSS 2.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| activision call of duty | = 1.4 | No fix listed |
| activision call of duty | = 1.5b | No fix listed |
| activision call of duty united offensive | = 1.41 | No fix listed |
| activision call of duty united offensive | = 1.51b | No fix listed |
| activision return to castle wolfenstein | = 1.0 | No fix listed |
| activision return to castle wolfenstein | = 1.1 | No fix listed |
| id software quake 3 arena | = 1.1.7 | No fix listed |
| id software quake 3 arena | = 1.16 | No fix listed |
| id software quake 3 arena | = 1.31 | No fix listed |
| id software quake 3 arena server | = 1.29f | No fix listed |
| id software quake 3 arena server | = 1.29g | No fix listed |
| id software quake 3 engine | All versions | No fix listed |
| id software wolfenstein enemy territory | = 1.0.2 | No fix listed |
| id software wolfenstein enemy territory | = 2.56 | No fix listed |
| lucasarts star wars jedi knight ii jedi outcast | = 1.0.4 | No fix listed |
| lucasarts star wars jedi knight jedi academy | = 1.0.11 | No fix listed |
| raven software soldier of fortune 2 | = 1.0.2 | No fix listed |
| raven software soldier of fortune 2 | = 1.0.3 | No fix listed |
References
- aluigi.altervista.org exploit
- bani.anime.net
- 20050402 In-game players kicking in the Quake 3 engine mailing-list
- 14811 third-party-advisory
- 12976 vdb-entry