CVE-2004-1395
- State
- Published
- Severity
- Not scored
- Published
- Feb 12, 2005
- Updated
- Aug 8, 2024
- Reserved
- Feb 12, 2005
Description
The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a UDP packet that causes recvfrom to generate a return code that causes the listening loop to exit, as demonstrated using zero byte packets or packets between 8193 and 12280 bytes, which result in conditions that are not "Operation would block."
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- 13446third-party-advisory
- http://aluigi.altervista.org/adv/lithsock-adv.txt
- lithtech-engine-communication-dos(18456)vdb-entry
- 20051021 F.E.A.R. 1.01 likes lithsockmailing-list
- 17317third-party-advisory
- 11902vdb-entry
- 20041213 Socket unreacheable in the Lithtech engine (new protocol)mailing-list
- 20041213 Socket unreacheable in the Lithtech engine (new protocol)mailing-list
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.