Vulnerability Details CVE-2004-0278
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.009
EPSS Ranking 74.5%
CVSS Severity
CVSS v2 Score 5.0
References
Products affected by CVE-2004-0278
-
cpe:2.3:a:ratbag:dirt_track_racing:1.0.3
-
cpe:2.3:a:ratbag:dirt_track_racing:2.0
-
cpe:2.3:a:ratbag:dirt_track_racing_australia:*
-
cpe:2.3:a:ratbag:dirt_track_racing_sprint_cars:*
-
cpe:2.3:a:ratbag:leadfoot:*
-
cpe:2.3:a:ratbag:world_of_outlaws_sprint_cars:*