First published: Fri Jul 23 2004(Updated: )
The Half-Life engine before July 7 2004 allows remote attackers to cause a denial of service (server or client crash) via an empty fragmented packet.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Valve Software Half-life Dedicated Server | =4.1.1.0 | |
Valve Software Half-life Dedicated Server | =4.1.0.7 | |
Valve Software Half-life Dedicated Server | =3.1.3 | |
Valve Software Half-life Dedicated Server | =3.1.1.0 | |
Valve Software Half-life Dedicated Server | =3.1.1.1d | |
Valve Software Half-life Dedicated Server | =4.1.0.6 | |
Valve Software Half-life Dedicated Server | =3.1.0.6 | |
Valve Software Half-life | =1.1.0.8 | |
Valve Software Half-life Dedicated Server | =4.1.1.1e | |
Valve Software Half-life | =1.1.0.9 | |
Valve Software Half-life Dedicated Server | =3.1 | |
Valve Software Half-life Dedicated Server | =3.1.1.1c1 | |
Valve Software Half-life | =1.1.1.0 | |
Valve Software Half-life Dedicated Server | =3.1.0.5 | |
Valve Software Half-life Dedicated Server | =4.1.1.1c1 | |
Valve Software Half-life Dedicated Server | =3.1.1.1e | |
Valve Software Half-life Dedicated Server | =4.1.0.4 | |
Valve Software Half-life Dedicated Server | =4.1.1.1d_beta | |
Valve Software Half-life Dedicated Server | =4.1.1.1e | |
Valve Software Half-life Dedicated Server | =3.1.1.1e | |
Valve Software Half-life | =1.1.0.4 | |
Valve Software Half-life Dedicated Server | =4.1.0.8 | |
Valve Software Half-life Dedicated Server | =3.1.0.4 | |
Valve Software Half-life Dedicated Server | =3.1.0.9 | |
Valve Software Half-life | =1.1.0.4 | |
Valve Software Half-life Dedicated Server | =3.1.0.7 | |
Valve Software Half-life Dedicated Server | =4.1.0.9 | |
Valve Software Half-life Dedicated Server | =3.1.0.8 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2004-0724 has a severity rating indicating it can lead to denial of service, potentially crashing the server or client.
To fix CVE-2004-0724, upgrade to the latest version of the Half-Life engine that eliminates the vulnerability.
CVE-2004-0724 affects multiple versions of the Half-Life engine, including versions below 4.1.1.0.
No, CVE-2004-0724 is not a remote code execution vulnerability but a denial of service vulnerability.
CVE-2004-0724 primarily impacts Windows and Linux versions of the Half-Life dedicated server.