Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Call_of_duty | Activision | 1.4 (including) | 1.4 (including) |
| Call_of_duty | Activision | 1.5b (including) | 1.5b (including) |
| Call_of_duty_united_offensive | Activision | 1.41 (including) | 1.41 (including) |
| Call_of_duty_united_offensive | Activision | 1.51b (including) | 1.51b (including) |
| Return_to_castle_wolfenstein | Activision | 1.0 (including) | 1.0 (including) |
| Return_to_castle_wolfenstein | Activision | 1.1 (including) | 1.1 (including) |
| Quake_3_arena | Id_software | 1.1.7 (including) | 1.1.7 (including) |
| Quake_3_arena | Id_software | 1.16 (including) | 1.16 (including) |
| Quake_3_arena | Id_software | 1.31 (including) | 1.31 (including) |
| Quake_3_arena_server | Id_software | 1.29f (including) | 1.29f (including) |
| Quake_3_arena_server | Id_software | 1.29g (including) | 1.29g (including) |
| Quake_3_engine | Id_software | * | * |
| Wolfenstein_enemy_territory | Id_software | 1.0.2 (including) | 1.0.2 (including) |
| Wolfenstein_enemy_territory | Id_software | 2.56 (including) | 2.56 (including) |
| Star_wars_jedi_knight_ii_jedi_outcast | Lucasarts | 1.0.4 (including) | 1.0.4 (including) |
| Star_wars_jedi_knight_jedi_academy | Lucasarts | 1.0.11 (including) | 1.0.11 (including) |
| Soldier_of_fortune_2 | Raven_software | 1.0.2 (including) | 1.0.2 (including) |
| Soldier_of_fortune_2 | Raven_software | 1.0.3 (including) | 1.0.3 (including) |