CVE-2004-1539 Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.
MediumCVSS 5.0
EPSS 3.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| gearbox software halo combat evolved | = 1.2 | No fix listed |
| gearbox software halo combat evolved | = 1.4 | No fix listed |
| gearbox software halo combat evolved | = 1.5 | No fix listed |
| gearbox software halo combat evolved | = 1.31 | No fix listed |
References
- 20041122 Broadcast client crash in Halo 1.05 mailing-list
- 13273 patch third-party-advisory vendor-advisory
- 11724 exploit vdb-entry
- halo-long-reply-dos(18196) vdb-entry