CVE-2004-2099 Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname...
MediumCVSS 5.1
EPSS 4.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| electronic arts need for speed hot pursuit 2 | <= 242.0 | No fix listed |
References
- aluigi.altervista.org exploit
- 20040122 Need for Speed Hot pursuit 2 <= 242 client's buffer overflow mailing-list
- 9473 exploit vdb-entry
- hotpursuit2-bo(14909) vdb-entry