Unscored severity · published May 2, 2005
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes…
–
CVSS
2.6%
EPSS
No
On KEV
Description
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.6% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Call OF Duty · Activision
1.4; 1.5b · source: NVD
CO
Call OF Duty United Offensive · Activision
1.41; 1.51b · source: NVD
Q3
Quake 3 Arena · ID Software
1.1.7; 1.16; 1.31 · source: NVD
Q3
Quake 3 Arena Server · ID Software
1.29f; 1.29g · source: NVD
Q3
Quake 3 Engine · ID Software
All versions, or not specified · source: NVD
RT
Return TO Castle Wolfenstein · Activision
1.0; 1.1 · source: NVD
SO
Soldier OF Fortune 2 · Raven Software
1.0.2; 1.0.3 · source: NVD
SW
Star Wars Jedi Knight II Jedi Outcast · Lucasarts
1.0.4 · source: NVD
SW
Star Wars Jedi Knight Jedi Academy · Lucasarts
1.0.11 · source: NVD
WE
Wolfenstein Enemy Territory · ID Software
1.0.2; 2.56 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0983
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0983
Exploit
http://aluigi.altervista.org/adv/q3msgboom-adv.txt
bani.anime.net
http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
marc.info
http://marc.info/?l=bugtraq&m=111246796918067&w=2
secunia.com
http://secunia.com/advisories/14811
www.securityfocus.com
http://www.securityfocus.com/bid/12976
More from Call OF Duty
–
CVE-2006-5058
Buffer overflow in (1) Call of Duty 1.5b and earlier, (2) Call of Duty United Offensive 1.51b and earlier, and (3) Call of Duty 2 1.3 and earlier allows remote attackers to…
–
CVE-2004-1664
Call of Duty 1.4 and earlier allows remote attackers to cause a denial of service (game end) via a large (1) query or (2) reply packet, which is not properly handled by the buffer…