CVE-2004-1395

CVE-2004-1395 describes a denial-of-service vulnerability in the Lithtech engine, affecting games like Contract Jack, No One Lives Forever 2, and Tron 2.0. Remote attackers can exploit this by sending specially crafted UDP packets, causing the game server's listening loop to exit and refuse connections. With a CVSS score of 5.0, this vulnerability is easily exploitable over the network without authentication, leading to a complete denial of service. The attack complexity is low, as it relies on specific UDP packet sizes to trigger the flaw. While not on the CISA KEV catalog, exploit code is publicly available on ExploitDB, and the vulnerability has garnered significant community discussion, indicating awareness among security researchers.