CVE-2005-0983

Medium

Description

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.

SeverityMedium
CVSS5.0
Exploit probability—
ProductId Software Quake 3 Arena
PublishedMay 2, 2005
First seenMay 2, 2005

How to fix

Sources list no fixed version or patch link for this vulnerability.

Affected products

ProductAffected versionsFixed in
id_software quake_3_arena1.1.7, 1.16, 1.31—
activision call_of_duty1.4, 1.5b—
activision call_of_duty_united_offensive1.41, 1.51b—
activision return_to_castle_wolfenstein1.0, 1.1—
id_software quake_3_arena_server1.29f, 1.29g—
id_software quake_3_engineNo range specified—
id_software wolfenstein_enemy_territory1.0.2, 2.56—
lucasarts star_wars_jedi_knight_ii_jedi_outcast1.0.4—
lucasarts star_wars_jedi_knight_jedi_academy1.0.11—
raven_software soldier_of_fortune_21.0.2, 1.0.3—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.