CVEvulnerability

CVE-2004-1500

2.1 LOW Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
2.1 LOW — AV:L/AC:L/Au:N/C:N/I:N/A:P

Description

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Affected configurations

• freeform interactive purge jihad 2.2.1 • monolith productions alien versus predator 2.1.0.9.6 • monolith productions blood 2.2.1 • monolith productions contract jack 1.1 • monolith productions global operations 2.0 • monolith productions global operations 2.1 • monolith productions kiss psycho circus 1.13 • monolith productions legends of might and magic 1.1 • monolith productions no one lives forever 1.0.004 • monolith productions no one lives forever 2.1.3 • monolith productions sanity 1.0 • monolith productions shogo 2.2 • monolith productions tron 2.0.1.42

References