CVE-2004-2099: Buffer Overflow
Published Dec 31, 2004
·Updated
Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.
Affected Software
1 affected component
Electronic Arts Need For Speed Hot Pursuit 2<=242.0
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 27, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2099?
CVE-2004-2099 is considered a critical vulnerability due to its potential to allow remote code execution.
2
How do I fix CVE-2004-2099?
To fix CVE-2004-2099, update to a version of Need for Speed Hot Pursuit 2 that is later than 242.0.
3
What are the risks associated with CVE-2004-2099?
The primary risk of CVE-2004-2099 is that remote attackers could execute arbitrary code on the affected system.
4
Which versions of Need for Speed Hot Pursuit 2 are affected by CVE-2004-2099?
CVE-2004-2099 affects Need for Speed Hot Pursuit 2 version 242.0 and earlier.
5
Who can exploit CVE-2004-2099?
CVE-2004-2099 can be exploited by remote attackers who control the game servers.