Vulnerability in Freeform Interactive Purge Jihad
CVE-2004-1500
Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.
EPSS: 0.019 (77.3th percentile) — read the EPSS interpretation.
Affected products
- Freeform_interactive Purge_jihad — versions 2.2.1
- Monolith_productions Alien_versus_predator — versions 2.1.0.9.6
- Monolith_productions Blood — versions 2.2.1
- Monolith_productions Contract_jack — versions 1.1
- Monolith_productions Global_operations — versions 2.0, 2.1
- Monolith_productions Kiss_psycho_circus — versions 1.13
- Monolith_productions Legends_of_might_and_magic — versions 1.1
- Monolith_productions No_one_lives_forever — versions 1.0.004, 2.1.3
- Monolith_productions Sanity — versions 1.0
- Monolith_productions Shogo — versions 2.2
References
- cve@mitre.org (vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)
- cve@mitre.org (x_refsource_MISC)
- cve@mitre.org (x_refsource_SECUNIA, Vendor Advisory, third-party-advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)