CVE-2005-0983
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
- Score
- CVSS 2.0 5.0 Medium
- Status
- Modified - cve@mitre.org
- Published
- 2005-05-02
- Last modified
- 2024-08-07
Affected products
- Call Of Duty (Activision)
- Call Of Duty United Offensive (Activision)
- Return To Castle Wolfenstein (Activision)
- Quake 3 Arena (Id Software)
- Quake 3 Arena Server (Id Software)
- Quake 3 Engine (Id Software)
- Wolfenstein Enemy Territory (Id Software)
- Star Wars Jedi Knight Ii Jedi Outcast (Lucasarts)
- Star Wars Jedi Knight Jedi Academy (Lucasarts)
- Soldier Of Fortune 2 (Raven Software)
References
- http://aluigi.altervista.org/adv/q3msgboom-adv.txt
- http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
- http://marc.info/?l=bugtraq&m=111246796918067&w=2
- http://secunia.com/advisories/14811
- http://www.securityfocus.com/bid/12976
