{"schemaVersion":3,"id":"CVE-2004-0608","aliases":[],"status":"published","duplicateOf":null,"title":null,"description":"The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.","dates":{"published":"2004-06-30T04:00:00.000Z","modified":"2024-08-08T00:24:26.584Z","reserved":null,"kevAdded":[],"kevDue":[]},"cvss":{"headline":{"score":10,"severity":"high","version":"2.0","versionLabel":"v2.0","source":"NVD","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","computed":false,"selection":"backend-summary"},"metrics":[{"version":"2.0","versionLabel":"v2.0","source":"NVD","score":10,"severity":"high","vector":"AV:N/AC:L/Au:N/C:C/I:C/A:C","exploitability":null,"impact":null,"computed":false}]},"epss":{"probability":0.73544,"percentile":0.99466,"severity":"critical","asOf":"2026-10-20T00:00:00.000Z","change":{"pp":0,"baselineDate":"2026-09-20T00:00:00.000Z","baselineScore":0.73544},"history":[{"date":"2026-09-14T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-15T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-16T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-17T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-18T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-19T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-20T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.73544,"percentile":0.99466}],"last30":[{"date":"2026-09-20T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-21T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-22T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-23T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-24T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-25T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-26T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-27T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-28T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-29T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-09-30T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-01T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-02T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-03T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-04T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-05T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-06T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-07T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-08T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-09T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-10T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-11T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-12T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-13T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-14T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-15T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-16T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-17T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-18T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-19T00:00:00.000Z","score":0.73544,"percentile":null},{"date":"2026-10-20T00:00:00.000Z","score":0.73544,"percentile":0.99466}]},"kev":{"state":"not-listed","entries":[],"listedCount":0,"totalCatalogs":3,"catalogs":[{"source":"cisa","label":"CISA","listed":false,"entry":null},{"source":"enisa","label":"ENISA","listed":false,"entry":null},{"source":"circl","label":"CIRCL","listed":false,"entry":null}]},"ransomware":{"state":"none-recorded","sources":[]},"exploits":[{"id":"REF_2A08E7CBF8E1CD4E","name":"Exploit Reference (securityfocus.com)","source":"reference","url":"http://www.securityfocus.com/bid/10570","maturity":"unknown","reliabilityScore":0.2,"verified":false,"type":null,"platforms":[],"requiresAuth":null,"exploitdb":null,"metasploit":null},{"id":"16848","name":"Unreal Tournament 2004 (Linux) - 'secure' Remote Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16848","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/16848.rb","codes":["CVE-2004-0608","OSVDB-7217"]},"metasploit":null},{"id":"10032","name":"Unreal Tournament 2004 - 'Secure' Remote Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/10032","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["linux"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"linux","file":"exploits/linux/remote/10032.rb","codes":["CVE-2004-0608","OSVDB-7217"]},"metasploit":null},{"id":"16693","name":"Unreal Tournament 2004 (Windows) - 'secure' Remote Overflow (Metasploit)","source":"exploit-database","url":"https://www.exploit-db.com/exploits/16693","maturity":"weaponized","reliabilityScore":0.8,"verified":true,"type":"remote","platforms":["windows"],"requiresAuth":null,"exploitdb":{"verified":true,"type":"remote","platform":"windows","file":"exploits/windows/remote/16693.rb","codes":["CVE-2004-0608","OSVDB-7217"]},"metasploit":null},{"id":"MSF_EXPLOIT_LINUX_GAMES_UT2004_SECURE","name":"Unreal Tournament 2004 \"secure\" Overflow (Linux)","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/linux/games/ut2004_secure.rb","maturity":"weaponized","reliabilityScore":0.6666666666666666,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/linux/games/ut2004_secure","rank":"400","rankName":"good","postAuth":false,"check":true,"stability":["crash-service-restarts"],"sideEffects":["ioc-in-logs"],"reliability":["unreliable-session"]}},{"id":"MSF_EXPLOIT_WINDOWS_GAMES_UT2004_SECURE","name":"Unreal Tournament 2004 \"secure\" Overflow (Win32)","source":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploit/windows/games/ut2004_secure.rb","maturity":"weaponized","reliabilityScore":0.6666666666666666,"verified":true,"type":"remote","platforms":[],"requiresAuth":false,"exploitdb":null,"metasploit":{"fullname":"exploit/windows/games/ut2004_secure","rank":"400","rankName":"good","postAuth":false,"check":true,"stability":["unknown-stability"],"sideEffects":["unknown-side-effects"],"reliability":["unknown-reliability"]}}],"exploitCount":6,"weaknesses":[],"affected":[{"vendor":"arush","product":"devastation","name":"devastation","label":"devastation","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"390.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"390.0","eol":null,"hubHref":"/vendor/arush/devastation"},{"vendor":"epic games","product":"unreal engine","name":"Unreal Engine","label":"unreal engine","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"226f","noFixRecorded":false,"fixedIn":null},{"text":"433","noFixRecorded":false,"fixedIn":null},{"text":"436","noFixRecorded":false,"fixedIn":null}],"versionsText":"226f | 433 | 436","eol":null,"hubHref":"/vendor/epic_games/unreal_engine"},{"vendor":"epic_games","product":"unreal_tournament","name":"unreal tournament","label":"unreal_tournament","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"451b","noFixRecorded":false,"fixedIn":null}],"versionsText":"451b","eol":null,"hubHref":"/vendor/epic_games/unreal_tournament"},{"vendor":"epic_games","product":"unreal_tournament_2003","name":"unreal tournament 2003","label":"unreal_tournament_2003","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"2199_linux","noFixRecorded":false,"fixedIn":null},{"text":"2199_macos","noFixRecorded":false,"fixedIn":null},{"text":"2199_win32","noFixRecorded":false,"fixedIn":null},{"text":"2225_macos","noFixRecorded":false,"fixedIn":null},{"text":"2225_win32","noFixRecorded":false,"fixedIn":null}],"versionsText":"2199_linux | 2199_macos | 2199_win32 | 2225_macos | 2225_win32","eol":null,"hubHref":"/vendor/epic_games/unreal_tournament_2003"},{"vendor":"epic_games","product":"unreal_tournament_2004","name":"unreal tournament 2004","label":"unreal_tournament_2004","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"macos","noFixRecorded":false,"fixedIn":null},{"text":"win32","noFixRecorded":false,"fixedIn":null}],"versionsText":"macos | win32","eol":null,"hubHref":"/vendor/epic_games/unreal_tournament_2004"},{"vendor":"gentoo","product":"linux","name":"linux","label":"linux","ecosystem":null,"cpePart":"o","purl":null,"purlType":null,"versions":[{"text":"1.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.4","eol":null,"hubHref":"/vendor/gentoo/linux"},{"vendor":"infogrames","product":"tacticalops","name":"tacticalops","label":"tacticalops","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"3.4","noFixRecorded":false,"fixedIn":null}],"versionsText":"3.4","eol":null,"hubHref":"/vendor/infogrames/tacticalops"},{"vendor":"ion_storm","product":"deusex","name":"deusex","label":"deusex","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.112_fm","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.112_fm","eol":null,"hubHref":"/vendor/ion_storm/deusex"},{"vendor":"nerf_arena_blast","product":"nerf_arena_blast","name":"nerf arena blast","label":"nerf_arena_blast","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1.2","noFixRecorded":false,"fixedIn":null}],"versionsText":"1.2","eol":null,"hubHref":"/vendor/nerf_arena_blast/nerf_arena_blast"},{"vendor":"rage_software","product":"mobile_forces","name":"mobile forces","label":"mobile_forces","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"20000.0","noFixRecorded":false,"fixedIn":null}],"versionsText":"20000.0","eol":null,"hubHref":"/vendor/rage_software/mobile_forces"},{"vendor":"robert_jordan","product":"wheel_of_time","name":"wheel of time","label":"wheel_of_time","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"333.0b","noFixRecorded":false,"fixedIn":null}],"versionsText":"333.0b","eol":null,"hubHref":"/vendor/robert_jordan/wheel_of_time"},{"vendor":"running_with_scissors","product":"postal_2","name":"postal 2","label":"postal_2","ecosystem":null,"cpePart":"a","purl":null,"purlType":null,"versions":[{"text":"1337","noFixRecorded":false,"fixedIn":null}],"versionsText":"1337","eol":null,"hubHref":"/vendor/running_with_scissors/postal_2"}],"affectedCount":12,"eol":{"hasEol":false,"count":0},"references":[{"url":"http://www.securityfocus.com/bid/10570","label":"www.securityfocus.com/bid/10570","hostname":"www.securityfocus.com","tags":["VDB Entry","X Refsource BID","Exploit","Vendor Advisory"]},{"url":"http://www.gentoo.org/security/en/glsa/glsa-200407-14.xml","label":"www.gentoo.org/security/en/glsa/glsa-200407-14.xml","hostname":"www.gentoo.org","tags":["Vendor Advisory","X Refsource GENTOO","Patch"]},{"url":"http://marc.info/?l=bugtraq&m=108787105023304&w=2","label":"marc.info?l=bugtraq&m=108787105023304&w=2","hostname":"marc.info","tags":["Mailing List","X Refsource BUGTRAQ"]},{"url":"http://aluigi.altervista.org/adv/unsecure-adv.txt","label":"aluigi.altervista.org/adv/unsecure-adv.txt","hostname":"aluigi.altervista.org","tags":["X Refsource MISC","Vendor Advisory"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/16451","label":"exchange.xforce.ibmcloud.com/vulnerabilities/16451","hostname":"exchange.xforce.ibmcloud.com","tags":["VDB Entry","X Refsource XF"]}],"lineage":{"upstream":[],"downstream":[],"duplicates":[],"related":[]},"timeline":[{"kind":"published","date":"2004-06-30T04:00:00.000Z","label":"Published","detail":"Vulnerability first disclosed.","source":null},{"kind":"modified","date":"2024-08-08T00:24:26.584Z","label":"Last modified","detail":"Vulnerability information updated.","source":null}],"risk":{"score":90,"level":"critical","profile":"Default","thresholds":{"critical":75,"high":50,"medium":25,"low":10}},"meta":{"dataAsOf":"2026-10-20T14:12:07.573Z","stale":false,"partial":false}}