CVE-2004-1207

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2005-01-10 · updated 2026-06-16

Description

The Serious engine, as used in (1) Alpha Black Zero Intrepid Protocol 1.04 and earlier, (2) Nitro family, and (3) Serious Sam Second Encounter 1.07 allows remote attackers to cause a denial of service (server crash) via a large number of UDP join requests that exceeds the maximum player limit, as originally reported for Alpha Black Zero.

Affected products

Serioussam Seriousengine: all versions

References

http://marc.info/?l=bugtraq&m=109651567308405&w=2
http://marc.info/?l=bugtraq&m=110180289205605&w=2
http://secunia.com/advisories/12687
http://securitytracker.com/id?1011454
http://www.securityfocus.com/bid/11279
https://exchange.xforce.ibmcloud.com/vulnerabilities/17545
http://marc.info/?l=bugtraq&m=109651567308405&w=2
http://marc.info/?l=bugtraq&m=110180289205605&w=2
http://secunia.com/advisories/12687
http://securitytracker.com/id?1011454
http://www.securityfocus.com/bid/11279
https://exchange.xforce.ibmcloud.com/vulnerabilities/17545

Get alerted when CVE-2004-1207 or the next vulnerability affects your stack