What’s Vulnerable › Vulnerabilities

CVE-2005-0983

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.6% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-05-02 · updated 2026-06-16

Description

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.

Affected products

• Activision Call Of Duty: 1.4, 1.5b
• Activision Call Of Duty United Offensive: 1.41, 1.51b
• Activision Return To Castle Wolfenstein: 1.0, 1.1
• Id Software Quake 3 Arena: 1.1.7, 1.16, 1.31
• Id Software Quake 3 Arena Server: 1.29f, 1.29g
• Id Software Quake 3 Engine: all versions
• Id Software Wolfenstein Enemy Territory: 1.0.2, 2.56
• Lucasarts Star Wars Jedi Knight Ii Jedi Outcast: 1.0.4
• Lucasarts Star Wars Jedi Knight Jedi Academy: 1.0.11
• Raven Software Soldier Of Fortune 2: 1.0.2, 1.0.3

References

• http://aluigi.altervista.org/adv/q3msgboom-adv.txt
• http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
• http://marc.info/?l=bugtraq&m=111246796918067&w=2
• http://secunia.com/advisories/14811
• http://www.securityfocus.com/bid/12976
• http://aluigi.altervista.org/adv/q3msgboom-adv.txt
• http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
• http://marc.info/?l=bugtraq&m=111246796918067&w=2
• http://secunia.com/advisories/14811
• http://www.securityfocus.com/bid/12976

Get alerted when CVE-2005-0983 or the next vulnerability affects your stack