medium5.0
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly t…
Impact
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Activision | Call Of Duty | Versions 1.4, 1.5b |
| Activision | Call Of Duty United Offensive | Versions 1.41, 1.51b |
| Activision | Return To Castle Wolfenstein | Versions 1.0, 1.1 |
| Id Software | Quake 3 Arena | Versions 1.1.7, 1.16, 1.31 |
| Id Software | Quake 3 Arena Server | Versions 1.29f, 1.29g |
| Id Software | Quake 3 Engine | All versions |
| Id Software | Wolfenstein Enemy Territory | Versions 1.0.2, 2.56 |
| Lucasarts | Star Wars Jedi Knight Ii Jedi Outcast | Version 1.0.4 |
| Lucasarts | Star Wars Jedi Knight Jedi Academy | Version 1.0.11 |
| Raven Software | Soldier Of Fortune 2 | Versions 1.0.2, 1.0.3 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
- http://marc.info/?l=bugtraq&m=111246796918067&w=2
- http://secunia.com/advisories/14811
- http://www.securityfocus.com/bid/12976
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
- http://marc.info/?l=bugtraq&m=111246796918067&w=2
- http://secunia.com/advisories/14811
- http://www.securityfocus.com/bid/12976