Vulnerability in Ratbag Dirt Track Racing
CVE-2004-0278
Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.
EPSS: 0.017 (74.8th percentile) — read the EPSS interpretation.
Affected products
- Ratbag Dirt_track_racing — versions 1.0.3, 2.0
- Ratbag Dirt_track_racing_australia
- Ratbag Dirt_track_racing_sprint_cars
- Ratbag Leadfoot
- Ratbag World_of_outlaws_sprint_cars
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)