CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-09-02

Last modified

2024-08-07

Affected products

• Lithium Ii Mod (Lithium Software)

References

• http://marc.info/?l=bugtraq&m=112500372617684&w=2
• http://secunia.com/advisories/16585/
• http://www.securityfocus.com/bid/14664
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22013