CVE-2005-0983 Denial of service in n/a
Remote attackers can cause a denial of service in Quake 3 engine games by sending long messages that are not properly truncated.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-0983?
CVE-2005-0983 is a medium-severity denial of service vulnerability in n/a, published on 5 Apr 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Which versions are affected by CVE-2005-0983?
It affects 10 products.
Products include Activision Call of Duty, Activision Call of Duty United Offensive, Activision Return to Castle Wolfenstein, Id Software Quake 3 Arena, Id Software Quake 3 Arena Server, Id Software Quake 3 Engine and 4 more.
How do I fix CVE-2005-0983?
No fix has been published for CVE-2005-0983 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2005-0983 being exploited?
There is no known exploitation of CVE-2005-0983 in the wild and no public exploit code.
Other vulnerabilities in n/a
Sources
Also known as GHSA-cmq2-xj3f-r498.