CVE-2004-0608

high · 10

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.

CVSS

73.5%

EPSS (exploit prob.)

99th

EPSS percentile

2004-12-06

Published

AV:N/AC:L/Au:N/C:C/I:C/A:C

Affected products

Vendor	Product	Affected versions
arush	devastation	390.0
dreamforge	tnn_outdoors_pro_hunter	all versions
epic_games	unreal_engine	226f
epic_games	unreal_engine	433
epic_games	unreal_engine	436
epic_games	unreal_tournament	451b
epic_games	unreal_tournament_2003	2199_linux
epic_games	unreal_tournament_2003	2199_macos
epic_games	unreal_tournament_2003	2199_win32
epic_games	unreal_tournament_2003	2225_macos
epic_games	unreal_tournament_2003	2225_win32
epic_games	unreal_tournament_2004	macos
epic_games	unreal_tournament_2004	win32
infogrames	tacticalops	3.4
infogrames	x-com_enforcer	all versions
ion_storm	deusex	1.112_fm
nerf_arena_blast	nerf_arena_blast	1.2
rage_software	mobile_forces	20000.0
robert_jordan	wheel_of_time	333.0b
running_with_scissors	postal_2	1337
gentoo	linux	1.4

Check a specific version with /api/v1/cve/match.

References

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2004-0608