medium5.0Public exploit code
CVE-2004-2371
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check re…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- RedStorm Ghost Recon Game Engine - Remote Denial of Service2004-02-24 · dos · multiple · Verified
Impact
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Redstorm | Desert Siege | All versions |
| Redstorm | Ghost Recon | Version 1.4 |
| Redstorm | The Sum Of All Fears | Version 1.1.1.0 |
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305