CVE-2004-1500

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Score

CVSS 2.0 2.1 Low

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Affected products

• Purge Jihad (Freeform Interactive)
• Alien Versus Predator (Monolith Productions)
• Blood (Monolith Productions)
• Contract Jack (Monolith Productions)
• Global Operations (Monolith Productions)
• Kiss Psycho Circus (Monolith Productions)
• Legends Of Might And Magic (Monolith Productions)
• No One Lives Forever (Monolith Productions)
• Sanity (Monolith Productions)
• Shogo (Monolith Productions)
• Tron (Monolith Productions)

References

• http://aluigi.altervista.org/adv/lithfs-adv.txt
• http://marc.info/?l=bugtraq&m=109969394601331&w=2
• http://secunia.com/advisories/13116/
• http://secunia.com/advisories/17317
• http://www.securityfocus.com/bid/11610
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17972