CVE-2004-0724: Valve Software Half-Life

Medium severity, CVSS 5.0. EPSS: 1.6% chance of exploitation in the next 30 days.

The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet.

Affected products

• Valve Software Half-Life: version 1.1.0.4 only; version 1.1.0.8 only; version 1.1.0.9 only; version 1.1.1.0 only
• Valve Software Half-Life Dedicated Server: version 3.1 only; version 3.1.0.4 only; version 3.1.0.5 only; version 3.1.0.6 only; version 3.1.0.7 only; version 3.1.0.8 only; …

Published 2004-07-27. Last modified 2026-06-16.