vulnwire
10.0crit

CVE-2004-0608in critical feed5 exploits

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
73.5%
percentile 99%
Public exploits
5
Metasploit · Exploit-DB

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.

Exploit prediction (EPSS)

73.54% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • Metasploit exploit/windows/games/ut2004_secure Unreal Tournament 2004 "secure" Overflow (Win32) · metasploit exploit, good rank · 2004-06-18
  • Metasploit exploit/linux/games/ut2004_secure Unreal Tournament 2004 "secure" Overflow (Linux) · metasploit exploit, good rank · 2004-06-18
  • EDB-16848 Unreal Tournament 2004 (Linux) - 'secure' Remote Overflow (Metasploit) · remote · 2010-09-20
  • EDB-16693 Unreal Tournament 2004 (Windows) - 'secure' Remote Overflow (Metasploit) · remote · 2010-09-20
  • EDB-10032 Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit) · remote · 2004-07-18

CVSS scores

Assigned byVersionScoreVector
NVD2.010.0AV:N/AC:L/Au:N/C:C/I:C/A:C

References

  • securityfocus.com /bid/10570 · vdb-entry, x_refsource_BID, x_transferred
  • gentoo.org /security/en/glsa/glsa-200407-14.xml · vendor-advisory, x_refsource_GENTOO, x_transferred
  • marc.info /?l=bugtraq&m=108787105023304&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • aluigi.altervista.org /adv/unsecure-adv.txt · x_refsource_MISC, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16451 · vdb-entry, x_refsource_XF, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.