CVE-2004-0278: Ratbag Dirt Track Racing

Medium severity, CVSS 5.0. EPSS: 1.7% chance of exploitation in the next 30 days.

Ratbag game engine, as used in products such as Dirt Track Racing, Leadfoot, and World of Outlaws Spring Cars, allows remote attackers to cause a denial of service (CPU consumption) via a TCP packet that specifies the length of data to read and then sends a second TCP packet that contains less data than specified, which causes Ratbag to repeatedly check the socket for more data.

Affected products

• Ratbag Dirt Track Racing: version 1.0.3 only; version 2.0 only
• Ratbag Dirt Track Racing Australia: any version
• Ratbag Dirt Track Racing Sprint Cars: any version
• Ratbag Leadfoot: any version
• Ratbag World Of Outlaws Sprint Cars: any version

Published 2004-11-23. Last modified 2026-06-16.