CVE-2005-0983: Activision Call Of Duty

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Quake 3 engine, as used in multiple games, allows remote attackers to cause a denial of service (client disconnect) via a long message, which is not properly truncated and causes the engine to process the remaining data as if it were network data.

Affected products

• Activision Call Of Duty: version 1.4 only; version 1.5b only
• Activision Call Of Duty United Offensive: version 1.41 only; version 1.51b only
• Activision Return To Castle Wolfenstein: version 1.0 only; version 1.1 only
• Id Software Quake 3 Arena: version 1.1.7 only; version 1.16 only; version 1.31 only
• Id Software Quake 3 Arena Server: version 1.29f only; version 1.29g only
• Id Software Quake 3 Engine: any version
• Id Software Wolfenstein Enemy Territory: version 1.0.2 only; version 2.56 only
• Lucasarts Star Wars Jedi Knight Ii Jedi Outcast: version 1.0.4 only
• Lucasarts Star Wars Jedi Knight Jedi Academy: version 1.0.11 only
• Raven Software Soldier Of Fortune 2: version 1.0.2 only; version 1.0.3 only

Published 2005-05-02. Last modified 2026-06-16.