Vulnerability Details CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.013
EPSS Ranking 78.9%
CVSS Severity
CVSS v2 Score 5.0
References
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
- http://marc.info/?l=bugtraq&m=111246796918067&w=2
- http://secunia.com/advisories/14811
- http://www.securityfocus.com/bid/12976
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
- http://marc.info/?l=bugtraq&m=111246796918067&w=2
- http://secunia.com/advisories/14811
- http://www.securityfocus.com/bid/12976
Products affected by CVE-2005-0983
-
cpe:2.3:a:activision:call_of_duty:1.4
-
cpe:2.3:a:activision:call_of_duty:1.5b
-
cpe:2.3:a:activision:call_of_duty_united_offensive:1.41
-
cpe:2.3:a:activision:call_of_duty_united_offensive:1.51b
-
cpe:2.3:a:activision:return_to_castle_wolfenstein:1.0
-
cpe:2.3:a:activision:return_to_castle_wolfenstein:1.1
-
cpe:2.3:a:id_software:quake_3_arena:1.1.7
-
cpe:2.3:a:id_software:quake_3_arena:1.16
-
cpe:2.3:a:id_software:quake_3_arena:1.31
-
cpe:2.3:a:id_software:quake_3_arena_server:1.29f
-
cpe:2.3:a:id_software:quake_3_arena_server:1.29g
-
cpe:2.3:a:id_software:quake_3_engine:*
-
cpe:2.3:a:id_software:wolfenstein_enemy_territory:1.0.2
-
cpe:2.3:a:id_software:wolfenstein_enemy_territory:2.56
-
cpe:2.3:a:lucasarts:star_wars_jedi_knight_ii_jedi_outcast:1.0.4
-
cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11
-
cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2
-
cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3