Read the docs
TI-2004-00549 Aliases CVE-2004-0608GHSA-qwq5-rcrx-8xwx

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier…

Priority HIGH 81Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
Complete · Complete · Complete
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA.

Summary

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier, Unreal Tournament 451b and earlier, Unreal Tournament 2003 2225 and earlier, Unreal Tournament 2004 before 3236, Wheel of Time 333b and earlier, and X-com Enforcer, allows remote attackers to execute arbitrary code via a UDP packet containing a secure query with a long value, which overwrites memory.

Why it matters now

EPSS 0.73544 99th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 21

CPEVersionsRoleVendor
cpe:2.3:a:arush:devastation:390.0:*:*:*:*:*:*:*390.0VulnerableArush
cpe:2.3:a:dreamforge:tnn_outdoors_pro_hunter:*:*:*:*:*:*:*:*all versionsVulnerableDreamforge
cpe:2.3:a:epic_games:unreal_engine:226f:*:*:*:*:*:*:*226fVulnerableEpic Games
cpe:2.3:a:epic_games:unreal_engine:433:*:*:*:*:*:*:*433VulnerableEpic Games
cpe:2.3:a:epic_games:unreal_engine:436:*:*:*:*:*:*:*436VulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament:451b:*:*:*:*:*:*:*451bVulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2003:2199_linux:*:*:*:*:*:*:*2199_linuxVulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2003:2199_macos:*:*:*:*:*:*:*2199_macosVulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2003:2199_win32:*:*:*:*:*:*:*2199_win32VulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2003:2225_macos:*:*:*:*:*:*:*2225_macosVulnerableEpic Games
  • cpe:2.3:a:arush:devastation:390.0:*:*:*:*:*:*:* Versions 390.0 Vulnerable ·Arush
  • cpe:2.3:a:dreamforge:tnn_outdoors_pro_hunter:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Dreamforge
  • cpe:2.3:a:epic_games:unreal_engine:226f:*:*:*:*:*:*:* Versions 226f Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_engine:433:*:*:*:*:*:*:* Versions 433 Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_engine:436:*:*:*:*:*:*:* Versions 436 Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament:451b:*:*:*:*:*:*:* Versions 451b Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2003:2199_linux:*:*:*:*:*:*:* Versions 2199_linux Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2003:2199_macos:*:*:*:*:*:*:* Versions 2199_macos Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2003:2199_win32:*:*:*:*:*:*:* Versions 2199_win32 Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2003:2225_macos:*:*:*:*:*:*:* Versions 2225_macos Vulnerable ·Epic Games
Show 11 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:epic_games:unreal_tournament_2003:2225_win32:*:*:*:*:*:*:*2225_win32VulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2004:macos:*:*:*:*:*:*:*macosVulnerableEpic Games
cpe:2.3:a:epic_games:unreal_tournament_2004:win32:*:*:*:*:*:*:*win32VulnerableEpic Games
cpe:2.3:a:infogrames:tacticalops:3.4:*:*:*:*:*:*:*3.4VulnerableInfogrames
cpe:2.3:a:infogrames:x-com_enforcer:*:*:*:*:*:*:*:*all versionsVulnerableInfogrames
cpe:2.3:a:ion_storm:deusex:1.112_fm:*:*:*:*:*:*:*1.112_fmVulnerableIon Storm
cpe:2.3:a:nerf_arena_blast:nerf_arena_blast:1.2:*:*:*:*:*:*:*1.2VulnerableNerf Arena Blast
cpe:2.3:a:rage_software:mobile_forces:20000.0:*:*:*:*:*:*:*20000.0VulnerableRage Software
cpe:2.3:a:robert_jordan:wheel_of_time:333.0b:*:*:*:*:*:*:*333.0bVulnerableRobert Jordan
cpe:2.3:a:running_with_scissors:postal_2:1337:*:*:*:*:*:*:*1337VulnerableRunning With Scissors
cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:*1.4Vulnerablegentoo
  • cpe:2.3:a:epic_games:unreal_tournament_2003:2225_win32:*:*:*:*:*:*:* Versions 2225_win32 Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2004:macos:*:*:*:*:*:*:* Versions macos Vulnerable ·Epic Games
  • cpe:2.3:a:epic_games:unreal_tournament_2004:win32:*:*:*:*:*:*:* Versions win32 Vulnerable ·Epic Games
  • cpe:2.3:a:infogrames:tacticalops:3.4:*:*:*:*:*:*:* Versions 3.4 Vulnerable ·Infogrames
  • cpe:2.3:a:infogrames:x-com_enforcer:*:*:*:*:*:*:*:* Versions all versions Vulnerable ·Infogrames
  • cpe:2.3:a:ion_storm:deusex:1.112_fm:*:*:*:*:*:*:* Versions 1.112_fm Vulnerable ·Ion Storm
  • cpe:2.3:a:nerf_arena_blast:nerf_arena_blast:1.2:*:*:*:*:*:*:* Versions 1.2 Vulnerable ·Nerf Arena Blast
  • cpe:2.3:a:rage_software:mobile_forces:20000.0:*:*:*:*:*:*:* Versions 20000.0 Vulnerable ·Rage Software
  • cpe:2.3:a:robert_jordan:wheel_of_time:333.0b:*:*:*:*:*:*:* Versions 333.0b Vulnerable ·Robert Jordan
  • cpe:2.3:a:running_with_scissors:postal_2:1337:*:*:*:*:*:*:* Versions 1337 Vulnerable ·Running With Scissors
  • cpe:2.3:o:gentoo:linux:1.4:*:*:*:*:*:*:* Versions 1.4 Vulnerable ·gentoo

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2004-0608
  2. 2026-10-03 Alias added: GHSA-qwq5-rcrx-8xwx

References

Patch 1

Advisory 1

Other 1

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences