Vulnerability in Activision Call Of Duty
CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
EPSS: 0.026 (83.4th percentile) — read the EPSS interpretation.
Affected products
- Activision Call_of_duty — versions 1.4, 1.5b
- Activision Call_of_duty_united_offensive — versions 1.41, 1.51b
- Activision Return_to_castle_wolfenstein — versions 1.0, 1.1
- Id_software Quake_3_arena — versions 1.1.7, 1.16, 1.31
- Id_software Quake_3_arena_server — versions 1.29f, 1.29g
- Id_software Quake_3_engine
- Id_software Wolfenstein_enemy_territory — versions 1.0.2, 2.56
- Lucasarts Star_wars_jedi_knight_ii_jedi_outcast — versions 1.0.4
- Lucasarts Star_wars_jedi_knight_jedi_academy — versions 1.0.11
- Raven_software Soldier_of_fortune_2 — versions 1.0.2, 1.0.3
References
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (x_refsource_MISC)