CVEvulnerability
CVE-2004-2099
5.1 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.1 MEDIUM — AV:N/AC:H/Au:N/C:P/I:P/A:P
Description
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
Affected configurations
• electronic arts need for speed hot pursuit 2 (<= 242.0)
References
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=107479094508691&w=2 marc.info
- http://www.securityfocus.com/bid/9473 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt Exploit
- http://marc.info/?l=bugtraq&m=107479094508691&w=2 marc.info
- http://www.securityfocus.com/bid/9473 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909 exchange.xforce.ibmcloud.com