medium5.1Public exploit code
CVE-2004-2099
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via lon…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Need for Speed 2 - Remote Client Buffer Overflow (PoC)2004-01-23 · dos · windows · Verified
Impact
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Electronic Arts | Need For Speed Hot Pursuit 2 | through 242.0 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt
- http://marc.info/?l=bugtraq&m=107479094508691&w=2
- http://www.securityfocus.com/bid/9473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909
- http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt
- http://marc.info/?l=bugtraq&m=107479094508691&w=2
- http://www.securityfocus.com/bid/9473
- https://exchange.xforce.ibmcloud.com/vulnerabilities/14909