VulnerabilityModified
CVE-2004-2099
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
MEDIUM 5.1EPSS 4.28%
Does this matter?
Lower severity and a low EPSS score (4.28%). Track it; it rarely justifies an emergency change on its own.
Description
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
- CVSS 2.0
- 5.1 MEDIUMAV:N/AC:H/Au:N/C:P/I:P/A:P
- EPSS
- 4.28% probability · 91th percentile
- CISA KEV
- Not listed
- Affected
- electronic arts/need for speed hot pursuit 2
- Source
- cve@mitre.org
References
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txtExploit
- http://marc.info/?l=bugtraq&m=107479094508691&w=2
- http://www.securityfocus.com/bid/9473Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txtExploit
- http://marc.info/?l=bugtraq&m=107479094508691&w=2
- http://www.securityfocus.com/bid/9473Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.