CVE-2004-0608

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier…

published June 30, 2004

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.5th percentile for exploit probability.

CVSS
—
EPSS
74%
Percentile
99.5
In the wild
Unconfirmed
What it is

⚠️ An oversized UDP packet is the sneaky culprit here! The Unreal Engine has a vulnerability that lets attackers execute arbitrary code — a bit like tossing a massive package at a delivery driver who just wasn’t prepared for it! 📦 Think of this like a restaurant that serves food without checking the size of the order. If a diner orders an entire banquet without anyone double-checking, it could cause chaos in the kitchen! In this case, the oversized UDP packet can overwrite memory. An attacker could exploit this to run malicious code, potentially compromising the game or server environment. This means they could manipulate gameplay, steal data, or even create havoc for unsuspecting players. It's a remote access fest, and who wants that chaos in gameplay?

Put simply

Think of this like a restaurant that serves food without checking the size of the order. If a diner orders an entire banquet without anyone double-checking, it could cause chaos in the kitchen! In this case, the oversized UDP packet can overwrite memory. This vulnerability allows attackers to send a specially crafted UDP packet containing a secure query that overwrites memory, enabling them to execute arbitrary code on affected versions of the Unreal Engine.

What to do

An attacker could exploit this to run malicious code, potentially compromising the game or server environment. This means they could manipulate gameplay, steal data, or even create havoc for unsuspecting players. It's a remote access fest, and who wants that chaos in gameplay? It's crucial to patch your Unreal Engine to the latest version available. If you're running any of the affected games, make sure to check for updates or patches from the developers to safeguard against this vulnerability. Stay vigilant! You've got this! By updating your engine and keeping your systems in check, you'll be a security hero in no time! 🦸

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.73544 · 99.5th percentile
Published
2004-06-30T04:00Z
EPSS history
Timeline
  • 30 JUN 04:00Z
    The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier…
    cvelistv5