Unscored severity · published Dec 6, 2004
CVE-2004-0608
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and…
–
CVSS
73.5%
EPSS
No
On KEV
Description
The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.
Exploitation
Is it being used?
Exploit prediction (EPSS)73.5% · higher than 99% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DE
Deusex · Ion Storm
1.112_fm · source: NVD
DE
Devastation · Arush
390.0 · source: NVD
LI
Linux · Gentoo
1.4 · source: NVD
MF
Mobile Forces · Rage Software
20000.0 · source: NVD
NA
Nerf Arena Blast · Nerf Arena Blast
1.2 · source: NVD
P2
Postal 2 · Running With Scissors
1337 · source: NVD
TA
Tacticalops · Infogrames
3.4 · source: NVD
TO
Tnn Outdoors Pro Hunter · Dreamforge
All versions, or not specified · source: NVD
UE
Unreal Engine · Epic Games
226f; 433; 436 · source: NVD
UT
Unreal Tournament · Epic Games
451b · source: NVD
UT
Unreal Tournament 2003 · Epic Games
2199_linux; 2199_macos; 2199_win32; 2225_macos; 2225_win32 · source: NVD
UT
Unreal Tournament 2004 · Epic Games
macos; win32 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-0608
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-0608
Vendor Advisory
http://aluigi.altervista.org/adv/unsecure-adv.txt
marc.info
http://marc.info/?l=bugtraq&m=108787105023304&w=2
Patch
http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml
Exploit
http://www.securityfocus.com/bid/10570
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/16451
