Search criteria

15 vulnerabilities found for soldier_of_fortune_2 by raven_software

FKIE_CVE-2009-3924

Vulnerability from fkie_nvd - Published: 2009-11-10 02:30 - Updated: 2025-04-09 00:30
Severity ?
Summary
Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/sof2pbbof-adv.txt
cve@mitre.orghttp://aluigi.org/poc/sof2pbbof.zipPatch
cve@mitre.orghttp://secunia.com/advisories/36221
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/52400
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/sof2pbbof-adv.txt
af854a3a-2127-422b-91ae-364da2661108http://aluigi.org/poc/sof2pbbof.zipPatch
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/36221
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/52400
Impacted products
Vendor Product Version
raven_software soldier_of_fortune_2 *
punkbuster punkbuster *
punkbuster punkbuster 1.272
punkbuster punkbuster 1.457
punkbuster punkbuster 1.458
punkbuster punkbuster 1.641
punkbuster punkbuster 1.642
punkbuster punkbuster 1.718
punkbuster punkbuster 1.723
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "1B80C05C-6B35-4B6C-990F-90032343BBD4",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        },
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "764E954C-374A-4947-B161-FD70101CF60F",
              "versionEndIncluding": "1.728",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.272:*:*:*:*:*:*:*",
              "matchCriteriaId": "2D3F9AE0-21BA-46EF-9478-69FB9CCABF69",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.457:*:*:*:*:*:*:*",
              "matchCriteriaId": "B1056D82-5F58-4995-A3ED-8C2DF9E28BDE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.458:*:*:*:*:*:*:*",
              "matchCriteriaId": "98AF72B7-746E-4D41-9F80-5F54A9ACBCDF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.641:*:*:*:*:*:*:*",
              "matchCriteriaId": "59F0238D-A80E-4B2F-99BB-76053AFE313E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.642:*:*:*:*:*:*:*",
              "matchCriteriaId": "C3E1E82C-6001-49A2-AF1D-9436F00109DE",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.718:*:*:*:*:*:*:*",
              "matchCriteriaId": "BBFCE4B0-699E-401C-B40D-38E240DCA9FA",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:punkbuster:punkbuster:1.723:*:*:*:*:*:*:*",
              "matchCriteriaId": "0BE4C80D-994E-48EF-A8BA-8D62B808628B",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de b\u00fafer en pbsv.dll usado en Soldier of Fortune II y posiblemente en otras aplicaciones cuando Even Balance PunkBuster v1.728 o versiones previas est\u00e1 activado, permite a atacantes remotos provocar una dengaci\u00f3n de servicio (ca\u00edda del servidor de la aplicaci\u00f3n) y posiblemente la ejecuci\u00f3n de c\u00f3digo de su elecci\u00f3n a trav\u00e9s de un paquete largo \"restart\"."
    }
  ],
  "id": "CVE-2009-3924",
  "lastModified": "2025-04-09T00:30:58.490",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2009-11-10T02:30:00.267",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Patch"
      ],
      "url": "http://aluigi.org/poc/sof2pbbof.zip"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/36221"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Patch"
      ],
      "url": "http://aluigi.org/poc/sof2pbbof.zip"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/36221"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-119"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2006-3400

Vulnerability from fkie_nvd - Published: 2006-07-06 20:05 - Updated: 2025-04-03 01:03
Severity ?
Summary
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
References
cve@mitre.orghttp://secunia.com/advisories/20946Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/18777Exploit
cve@mitre.orghttp://www.vupen.com/english/advisories/2006/2657
cve@mitre.orghttps://exchange.xforce.ibmcloud.com/vulnerabilities/27614
cve@mitre.orghttps://www.exploit-db.com/exploits/1976
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/20946Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/18777Exploit
af854a3a-2127-422b-91ae-364da2661108http://www.vupen.com/english/advisories/2006/2657
af854a3a-2127-422b-91ae-364da2661108https://exchange.xforce.ibmcloud.com/vulnerabilities/27614
af854a3a-2127-422b-91ae-364da2661108https://www.exploit-db.com/exploits/1976
Impacted products
Vendor Product Version
id_software quake_3_engine 1.32b
id_software quake_3_engine 1.32c
id_software quake_3_engine icculus_812
raven_software soldier_of_fortune_2 1.03
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_engine:1.32b:*:*:*:*:*:*:*",
              "matchCriteriaId": "FAC83733-F8B0-4985-BB48-2DA85C5C4393",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_engine:1.32c:*:*:*:*:*:*:*",
              "matchCriteriaId": "140AE21A-5028-485F-822C-4DA7F557A40C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_engine:icculus_812:*:*:*:*:*:*:*",
              "matchCriteriaId": "C0CE71CC-1E0C-4927-8E3B-432304719088",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.03:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E7194A0-A9B3-490F-A575-1F7AEADEE636",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
    },
    {
      "lang": "es",
      "value": "Un desbordamiento de pila basado en b\u00fafer en la funci\u00f3n CG_ServerCommand del motor de Quake 3, tal como se usa en Soldier of Fortune 2 (SOF2MP) GOLD 1.03 permite a atacantes remotos provocar una denegaci\u00f3n de servicio y posiblemente ejecutar c\u00f3digo arbitrario mediante el env\u00edo de un comando desde el servidor."
    }
  ],
  "id": "CVE-2006-3400",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": true,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2006-07-06T20:05:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20946"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/18777"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.vupen.com/english/advisories/2006/2657"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
    },
    {
      "source": "cve@mitre.org",
      "url": "https://www.exploit-db.com/exploits/1976"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/20946"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/18777"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.vupen.com/english/advisories/2006/2657"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "https://www.exploit-db.com/exploits/1976"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2005-2115

Vulnerability from fkie_nvd - Published: 2005-07-05 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/sof2ignore-adv.txtVendor Advisory
cve@mitre.orghttp://marc.info/?l=bugtraq&m=112008428126593&w=2
cve@mitre.orghttp://secunia.com/advisories/15868Vendor Advisory
cve@mitre.orghttp://www.osvdb.org/17649
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/sof2ignore-adv.txtVendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=112008428126593&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/15868Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.osvdb.org/17649
Impacted products
Vendor Product Version
raven_software soldier_of_fortune_2 1.02
raven_software soldier_of_fortune_2 1.03
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.02:*:*:*:*:*:*:*",
              "matchCriteriaId": "82AD966E-236B-4F41-93A9-75B90535E2EF",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.03:*:*:*:*:*:*:*",
              "matchCriteriaId": "7E7194A0-A9B3-490F-A575-1F7AEADEE636",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
    }
  ],
  "id": "CVE-2005-2115",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-07-05T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/15868"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.osvdb.org/17649"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/15868"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.osvdb.org/17649"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2005-0568

Vulnerability from fkie_nvd - Published: 2005-05-02 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/sof2guidboom-adv.txtExploit, Vendor Advisory
cve@mitre.orghttp://marc.info/?l=bugtraq&m=110927288423807&w=2
cve@mitre.orghttp://secunia.com/advisories/13289Vendor Advisory
cve@mitre.orghttp://securitytracker.com/id?1013291Vendor Advisory
cve@mitre.orghttp://www.securityfocus.com/bid/12650Exploit
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/sof2guidboom-adv.txtExploit, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=110927288423807&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/13289Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://securitytracker.com/id?1013291Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/12650Exploit
Impacted products
Vendor Product Version
raven_software soldier_of_fortune_2 1.0.2
raven_software soldier_of_fortune_2 1.0.3
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EDA57E8-B70F-40F6-83F4-A19A41A55952",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB13EB2B-42EC-45ED-948B-7B2617C1B82C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
    }
  ],
  "id": "CVE-2005-0568",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-05-02T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/13289"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1013291"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/12650"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Vendor Advisory"
      ],
      "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://secunia.com/advisories/13289"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Vendor Advisory"
      ],
      "url": "http://securitytracker.com/id?1013291"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://www.securityfocus.com/bid/12650"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2005-0983

Vulnerability from fkie_nvd - Published: 2005-05-02 04:00 - Updated: 2025-04-03 01:03
Severity ?
Summary
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
References
cve@mitre.orghttp://aluigi.altervista.org/adv/q3msgboom-adv.txtExploit
cve@mitre.orghttp://bani.anime.net/banimod/forums/viewtopic.php?p=27322
cve@mitre.orghttp://marc.info/?l=bugtraq&m=111246796918067&w=2
cve@mitre.orghttp://secunia.com/advisories/14811
cve@mitre.orghttp://www.securityfocus.com/bid/12976
af854a3a-2127-422b-91ae-364da2661108http://aluigi.altervista.org/adv/q3msgboom-adv.txtExploit
af854a3a-2127-422b-91ae-364da2661108http://bani.anime.net/banimod/forums/viewtopic.php?p=27322
af854a3a-2127-422b-91ae-364da2661108http://marc.info/?l=bugtraq&m=111246796918067&w=2
af854a3a-2127-422b-91ae-364da2661108http://secunia.com/advisories/14811
af854a3a-2127-422b-91ae-364da2661108http://www.securityfocus.com/bid/12976
Impacted products
Vendor Product Version
activision call_of_duty 1.4
activision call_of_duty 1.5b
activision call_of_duty_united_offensive 1.41
activision call_of_duty_united_offensive 1.51b
activision return_to_castle_wolfenstein 1.0
activision return_to_castle_wolfenstein 1.1
id_software quake_3_arena 1.1.7
id_software quake_3_arena 1.16
id_software quake_3_arena 1.31
id_software quake_3_arena_server 1.29f
id_software quake_3_arena_server 1.29g
id_software quake_3_engine *
id_software wolfenstein_enemy_territory 1.0.2
id_software wolfenstein_enemy_territory 2.56
lucasarts star_wars_jedi_knight_ii_jedi_outcast 1.0.4
lucasarts star_wars_jedi_knight_jedi_academy 1.0.11
raven_software soldier_of_fortune_2 1.0.2
raven_software soldier_of_fortune_2 1.0.3
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:activision:call_of_duty:1.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "56174554-305C-44B2-84AC-1FBFB2630806",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:activision:call_of_duty:1.5b:*:*:*:*:*:*:*",
              "matchCriteriaId": "E73821EF-6B2C-47DF-8937-FC4AD438793C",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:activision:call_of_duty_united_offensive:1.41:*:*:*:*:*:*:*",
              "matchCriteriaId": "794E93AF-7815-4C7B-B1F5-B24C6C8BFA90",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:activision:call_of_duty_united_offensive:1.51b:*:*:*:*:*:*:*",
              "matchCriteriaId": "A5125394-3D87-449F-8116-1F2F13D0F4CB",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.0:*:*:*:*:*:*:*",
              "matchCriteriaId": "3AB8B91F-5F9F-4A10-BD6E-8A6320113163",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:activision:return_to_castle_wolfenstein:1.1:*:*:*:*:*:*:*",
              "matchCriteriaId": "310CA9A4-4C58-47F0-B8B7-8602B2E4B290",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_arena:1.1.7:*:*:*:*:*:*:*",
              "matchCriteriaId": "AA52F4D3-901C-441C-BFA2-1AF1BD06B967",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_arena:1.16:*:*:*:*:*:*:*",
              "matchCriteriaId": "FADA6FA7-6916-4240-90B7-5FB045F61F9A",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_arena:1.31:*:*:*:*:*:*:*",
              "matchCriteriaId": "12138C9F-1DE9-48D9-AA12-5A621558F825",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_arena_server:1.29f:*:*:*:*:*:*:*",
              "matchCriteriaId": "47BF98EF-3228-4FF5-B770-C1A8BEC3C0A1",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_arena_server:1.29g:*:*:*:*:*:*:*",
              "matchCriteriaId": "2AEA3ACD-EC79-4AEC-B056-03F72056DE27",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:quake_3_engine:*:*:*:*:*:*:*:*",
              "matchCriteriaId": "68AE0171-46F1-4137-99BE-4B825A403D6E",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:wolfenstein_enemy_territory:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "FC2CB0EE-8042-4157-BB4B-A4A07BA79FE8",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:id_software:wolfenstein_enemy_territory:2.56:*:*:*:*:*:*:*",
              "matchCriteriaId": "1CDC1195-FE8C-4251-91BE-B1B84A785C7D",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:lucasarts:star_wars_jedi_knight_ii_jedi_outcast:1.0.4:*:*:*:*:*:*:*",
              "matchCriteriaId": "736B09BA-E0C4-4179-84B2-F4F8F2FC4B66",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:lucasarts:star_wars_jedi_knight_jedi_academy:1.0.11:*:*:*:*:*:*:*",
              "matchCriteriaId": "E760893E-36FA-486D-872C-7C8E4B4C0A34",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.2:*:*:*:*:*:*:*",
              "matchCriteriaId": "3EDA57E8-B70F-40F6-83F4-A19A41A55952",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:a:raven_software:soldier_of_fortune_2:1.0.3:*:*:*:*:*:*:*",
              "matchCriteriaId": "BB13EB2B-42EC-45ED-948B-7B2617C1B82C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
    }
  ],
  "id": "CVE-2005-0983",
  "lastModified": "2025-04-03T01:03:51.193",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "MEDIUM",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 5.0,
          "confidentialityImpact": "NONE",
          "integrityImpact": "NONE",
          "vectorString": "AV:N/AC:L/Au:N/C:N/I:N/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 2.9,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ]
  },
  "published": "2005-05-02T04:00:00.000",
  "references": [
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://secunia.com/advisories/14811"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityfocus.com/bid/12976"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://secunia.com/advisories/14811"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityfocus.com/bid/12976"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Deferred",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2009-3924 (GCVE-0-2009-3924)

Vulnerability from cvelistv5 – Published: 2009-11-10 02:00 – Updated: 2024-08-07 06:45
VLAI?
Summary
Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:45:50.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
          },
          {
            "name": "punkbuster-pbsv-bo(52400)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.org/poc/sof2pbbof.zip"
          },
          {
            "name": "36221",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36221"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-08-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
        },
        {
          "name": "punkbuster-pbsv-bo(52400)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.org/poc/sof2pbbof.zip"
        },
        {
          "name": "36221",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36221"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3924",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
            },
            {
              "name": "punkbuster-pbsv-bo(52400)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
            },
            {
              "name": "http://aluigi.org/poc/sof2pbbof.zip",
              "refsource": "MISC",
              "url": "http://aluigi.org/poc/sof2pbbof.zip"
            },
            {
              "name": "36221",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36221"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3924",
    "datePublished": "2009-11-10T02:00:00",
    "dateReserved": "2009-11-09T00:00:00",
    "dateUpdated": "2024-08-07T06:45:50.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-3400 (GCVE-0-2006-3400)

Vulnerability from cvelistv5 – Published: 2006-07-06 20:00 – Updated: 2024-08-07 18:30
VLAI?
Summary
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1976 exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/20946 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/18777 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2657 vdb-entryx_refsource_VUPEN
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:32.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "quake3-cgservercommand-bo(27614)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
          },
          {
            "name": "1976",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/1976"
          },
          {
            "name": "20946",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20946"
          },
          {
            "name": "18777",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18777"
          },
          {
            "name": "ADV-2006-2657",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2657"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-07-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-18T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "quake3-cgservercommand-bo(27614)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
        },
        {
          "name": "1976",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/1976"
        },
        {
          "name": "20946",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20946"
        },
        {
          "name": "18777",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18777"
        },
        {
          "name": "ADV-2006-2657",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2657"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3400",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "quake3-cgservercommand-bo(27614)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
            },
            {
              "name": "1976",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/1976"
            },
            {
              "name": "20946",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20946"
            },
            {
              "name": "18777",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18777"
            },
            {
              "name": "ADV-2006-2657",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2657"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3400",
    "datePublished": "2006-07-06T20:00:00",
    "dateReserved": "2006-07-06T00:00:00",
    "dateUpdated": "2024-08-07T18:30:32.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2115 (GCVE-0-2005-2115)

Vulnerability from cvelistv5 – Published: 2005-07-01 04:00 – Updated: 2024-08-07 22:15
VLAI?
Summary
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/15868 third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=112008428126593&w=2 mailing-listx_refsource_BUGTRAQ
http://aluigi.altervista.org/adv/sof2ignore-adv.txt x_refsource_MISC
http://www.osvdb.org/17649 vdb-entryx_refsource_OSVDB
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:15:37.421Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15868",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/15868"
          },
          {
            "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
          },
          {
            "name": "17649",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/17649"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-06-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15868",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/15868"
        },
        {
          "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
        },
        {
          "name": "17649",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/17649"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-2115",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15868",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/15868"
            },
            {
              "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
            },
            {
              "name": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
            },
            {
              "name": "17649",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/17649"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-2115",
    "datePublished": "2005-07-01T04:00:00",
    "dateReserved": "2005-07-01T00:00:00",
    "dateUpdated": "2024-08-07T22:15:37.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-0983 (GCVE-0-2005-0983)

Vulnerability from cvelistv5 – Published: 2005-04-05 04:00 – Updated: 2024-08-07 21:35
VLAI?
Summary
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:35:58.933Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "14811",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/14811"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
          },
          {
            "name": "12976",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/12976"
          },
          {
            "name": "20050402 In-game players kicking in the Quake 3 engine",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-04-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "14811",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/14811"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
        },
        {
          "name": "12976",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/12976"
        },
        {
          "name": "20050402 In-game players kicking in the Quake 3 engine",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-0983",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "14811",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/14811"
            },
            {
              "name": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
            },
            {
              "name": "12976",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/12976"
            },
            {
              "name": "20050402 In-game players kicking in the Quake 3 engine",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
            },
            {
              "name": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322",
              "refsource": "MISC",
              "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-0983",
    "datePublished": "2005-04-05T04:00:00",
    "dateReserved": "2005-04-05T00:00:00",
    "dateUpdated": "2024-08-07T21:35:58.933Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-0568 (GCVE-0-2005-0568)

Vulnerability from cvelistv5 – Published: 2005-02-27 05:00 – Updated: 2024-08-07 21:21
VLAI?
Summary
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/13289 third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=110927288423807&w=2 mailing-listx_refsource_BUGTRAQ
http://aluigi.altervista.org/adv/sof2guidboom-adv.txt x_refsource_MISC
http://securitytracker.com/id?1013291 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/12650 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:21:06.544Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "13289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/13289"
          },
          {
            "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
          },
          {
            "name": "1013291",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1013291"
          },
          {
            "name": "12650",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/12650"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-02-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "13289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/13289"
        },
        {
          "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
        },
        {
          "name": "1013291",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1013291"
        },
        {
          "name": "12650",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/12650"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-0568",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "13289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/13289"
            },
            {
              "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
            },
            {
              "name": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
            },
            {
              "name": "1013291",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1013291"
            },
            {
              "name": "12650",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/12650"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-0568",
    "datePublished": "2005-02-27T05:00:00",
    "dateReserved": "2005-02-27T00:00:00",
    "dateUpdated": "2024-08-07T21:21:06.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2009-3924 (GCVE-0-2009-3924)

Vulnerability from nvd – Published: 2009-11-10 02:00 – Updated: 2024-08-07 06:45
VLAI?
Summary
Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T06:45:50.885Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
          },
          {
            "name": "punkbuster-pbsv-bo(52400)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.org/poc/sof2pbbof.zip"
          },
          {
            "name": "36221",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/36221"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2009-08-12T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-08-16T14:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
        },
        {
          "name": "punkbuster-pbsv-bo(52400)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.org/poc/sof2pbbof.zip"
        },
        {
          "name": "36221",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/36221"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2009-3924",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2pbbof-adv.txt"
            },
            {
              "name": "punkbuster-pbsv-bo(52400)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/52400"
            },
            {
              "name": "http://aluigi.org/poc/sof2pbbof.zip",
              "refsource": "MISC",
              "url": "http://aluigi.org/poc/sof2pbbof.zip"
            },
            {
              "name": "36221",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/36221"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2009-3924",
    "datePublished": "2009-11-10T02:00:00",
    "dateReserved": "2009-11-09T00:00:00",
    "dateUpdated": "2024-08-07T06:45:50.885Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2006-3400 (GCVE-0-2006-3400)

Vulnerability from nvd – Published: 2006-07-06 20:00 – Updated: 2024-08-07 18:30
VLAI?
Summary
Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
https://exchange.xforce.ibmcloud.com/vulnerabilit… vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/1976 exploitx_refsource_EXPLOIT-DB
http://secunia.com/advisories/20946 third-party-advisoryx_refsource_SECUNIA
http://www.securityfocus.com/bid/18777 vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2006/2657 vdb-entryx_refsource_VUPEN
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T18:30:32.818Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "quake3-cgservercommand-bo(27614)",
            "tags": [
              "vdb-entry",
              "x_refsource_XF",
              "x_transferred"
            ],
            "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
          },
          {
            "name": "1976",
            "tags": [
              "exploit",
              "x_refsource_EXPLOIT-DB",
              "x_transferred"
            ],
            "url": "https://www.exploit-db.com/exploits/1976"
          },
          {
            "name": "20946",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/20946"
          },
          {
            "name": "18777",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/18777"
          },
          {
            "name": "ADV-2006-2657",
            "tags": [
              "vdb-entry",
              "x_refsource_VUPEN",
              "x_transferred"
            ],
            "url": "http://www.vupen.com/english/advisories/2006/2657"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2006-07-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2017-10-18T16:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "quake3-cgservercommand-bo(27614)",
          "tags": [
            "vdb-entry",
            "x_refsource_XF"
          ],
          "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
        },
        {
          "name": "1976",
          "tags": [
            "exploit",
            "x_refsource_EXPLOIT-DB"
          ],
          "url": "https://www.exploit-db.com/exploits/1976"
        },
        {
          "name": "20946",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/20946"
        },
        {
          "name": "18777",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/18777"
        },
        {
          "name": "ADV-2006-2657",
          "tags": [
            "vdb-entry",
            "x_refsource_VUPEN"
          ],
          "url": "http://www.vupen.com/english/advisories/2006/2657"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2006-3400",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Stack-based buffer overflow in the CG_ServerCommand function in Quake 3 Engine as used by Soldier of Fortune 2 (SOF2MP) GOLD 1.03 allows remote attackers to cause a denial of service and possibly execute code by sending a long command from the server."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "quake3-cgservercommand-bo(27614)",
              "refsource": "XF",
              "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/27614"
            },
            {
              "name": "1976",
              "refsource": "EXPLOIT-DB",
              "url": "https://www.exploit-db.com/exploits/1976"
            },
            {
              "name": "20946",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/20946"
            },
            {
              "name": "18777",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/18777"
            },
            {
              "name": "ADV-2006-2657",
              "refsource": "VUPEN",
              "url": "http://www.vupen.com/english/advisories/2006/2657"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2006-3400",
    "datePublished": "2006-07-06T20:00:00",
    "dateReserved": "2006-07-06T00:00:00",
    "dateUpdated": "2024-08-07T18:30:32.818Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-2115 (GCVE-0-2005-2115)

Vulnerability from nvd – Published: 2005-07-01 04:00 – Updated: 2024-08-07 22:15
VLAI?
Summary
Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/15868 third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=112008428126593&w=2 mailing-listx_refsource_BUGTRAQ
http://aluigi.altervista.org/adv/sof2ignore-adv.txt x_refsource_MISC
http://www.osvdb.org/17649 vdb-entryx_refsource_OSVDB
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T22:15:37.421Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "15868",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/15868"
          },
          {
            "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
          },
          {
            "name": "17649",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://www.osvdb.org/17649"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-06-29T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "15868",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/15868"
        },
        {
          "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
        },
        {
          "name": "17649",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://www.osvdb.org/17649"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-2115",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Soldier of Fortune II 1.02x and 1.03 allows remote attackers to cause a denial of service (server crash) via a large ID value in the ignore command, which is used as an array index and causes an out-of-bounds operation."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "15868",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/15868"
            },
            {
              "name": "20050629 In-game /ignore crash in Soldier of Fortune II 1.03",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=112008428126593\u0026w=2"
            },
            {
              "name": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2ignore-adv.txt"
            },
            {
              "name": "17649",
              "refsource": "OSVDB",
              "url": "http://www.osvdb.org/17649"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-2115",
    "datePublished": "2005-07-01T04:00:00",
    "dateReserved": "2005-07-01T00:00:00",
    "dateUpdated": "2024-08-07T22:15:37.421Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-0983 (GCVE-0-2005-0983)

Vulnerability from nvd – Published: 2005-04-05 04:00 – Updated: 2024-08-07 21:35
VLAI?
Summary
Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:35:58.933Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "14811",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/14811"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
          },
          {
            "name": "12976",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/12976"
          },
          {
            "name": "20050402 In-game players kicking in the Quake 3 engine",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-04-02T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "14811",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/14811"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
        },
        {
          "name": "12976",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/12976"
        },
        {
          "name": "20050402 In-game players kicking in the Quake 3 engine",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-0983",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "14811",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/14811"
            },
            {
              "name": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/q3msgboom-adv.txt"
            },
            {
              "name": "12976",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/12976"
            },
            {
              "name": "20050402 In-game players kicking in the Quake 3 engine",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=111246796918067\u0026w=2"
            },
            {
              "name": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322",
              "refsource": "MISC",
              "url": "http://bani.anime.net/banimod/forums/viewtopic.php?p=27322"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-0983",
    "datePublished": "2005-04-05T04:00:00",
    "dateReserved": "2005-04-05T00:00:00",
    "dateUpdated": "2024-08-07T21:35:58.933Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2005-0568 (GCVE-0-2005-0568)

Vulnerability from nvd – Published: 2005-02-27 05:00 – Updated: 2024-08-07 21:21
VLAI?
Summary
Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference.
Severity ?
No CVSS data available.
CWE
  • n/a
Assigner
References
http://secunia.com/advisories/13289 third-party-advisoryx_refsource_SECUNIA
http://marc.info/?l=bugtraq&m=110927288423807&w=2 mailing-listx_refsource_BUGTRAQ
http://aluigi.altervista.org/adv/sof2guidboom-adv.txt x_refsource_MISC
http://securitytracker.com/id?1013291 vdb-entryx_refsource_SECTRACK
http://www.securityfocus.com/bid/12650 vdb-entryx_refsource_BID
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-07T21:21:06.544Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "13289",
            "tags": [
              "third-party-advisory",
              "x_refsource_SECUNIA",
              "x_transferred"
            ],
            "url": "http://secunia.com/advisories/13289"
          },
          {
            "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
            "tags": [
              "mailing-list",
              "x_refsource_BUGTRAQ",
              "x_transferred"
            ],
            "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
          },
          {
            "name": "1013291",
            "tags": [
              "vdb-entry",
              "x_refsource_SECTRACK",
              "x_transferred"
            ],
            "url": "http://securitytracker.com/id?1013291"
          },
          {
            "name": "12650",
            "tags": [
              "vdb-entry",
              "x_refsource_BID",
              "x_transferred"
            ],
            "url": "http://www.securityfocus.com/bid/12650"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2005-02-24T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2016-10-17T13:57:01",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "name": "13289",
          "tags": [
            "third-party-advisory",
            "x_refsource_SECUNIA"
          ],
          "url": "http://secunia.com/advisories/13289"
        },
        {
          "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
          "tags": [
            "mailing-list",
            "x_refsource_BUGTRAQ"
          ],
          "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
        },
        {
          "name": "1013291",
          "tags": [
            "vdb-entry",
            "x_refsource_SECTRACK"
          ],
          "url": "http://securitytracker.com/id?1013291"
        },
        {
          "name": "12650",
          "tags": [
            "vdb-entry",
            "x_refsource_BID"
          ],
          "url": "http://www.securityfocus.com/bid/12650"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2005-0568",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "Soldier of Fortune II 1.03 gold allows remote attackers to cause a denial of service (application crash) via a large cl_guid value, which results in an invalid pointer dereference."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "13289",
              "refsource": "SECUNIA",
              "url": "http://secunia.com/advisories/13289"
            },
            {
              "name": "20050224 In-game cl_guid crash in Soldier of Fortune II 1.03",
              "refsource": "BUGTRAQ",
              "url": "http://marc.info/?l=bugtraq\u0026m=110927288423807\u0026w=2"
            },
            {
              "name": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt",
              "refsource": "MISC",
              "url": "http://aluigi.altervista.org/adv/sof2guidboom-adv.txt"
            },
            {
              "name": "1013291",
              "refsource": "SECTRACK",
              "url": "http://securitytracker.com/id?1013291"
            },
            {
              "name": "12650",
              "refsource": "BID",
              "url": "http://www.securityfocus.com/bid/12650"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2005-0568",
    "datePublished": "2005-02-27T05:00:00",
    "dateReserved": "2005-02-27T00:00:00",
    "dateUpdated": "2024-08-07T21:21:06.544Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}