10.0crit
CVE-2004-02901 exploit
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contai…
Published 22 y ago · modified 4 mo ago · JSON
CVSS
10.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
6.1%
percentile 94%
Public exploits
1
Exploit-DB
Summary
Buffer overflow in Purge Jihad 2.0.1 and earlier allows remote game servers to execute arbitrary code via an information packet that contains large (1) battle type and (2) map name fields.
Exploit prediction (EPSS)
6.15% probability of exploitation in the next 30 days, higher than 94% of all scored CVEs.
Exploits and detections
- EDB-23707 Freeform Interactive Purge 1.4.7/Purge Jihad 2.0.1 Game Client - Remote Buffer Overflow · remote · 2004-02-16
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 10.0 | AV:N/AC:L/Au:N/C:C/I:C/A:C |
References
- securityfocus.com /bid/9671 · vdb-entry, x_refsource_BID, x_transferred
- exchange.xforce.ibmcloud.com /vulnerabilities/15216 · vdb-entry, x_refsource_XF, x_transferred
- purge.worthplaying.com /phpbb/viewtopic.php?t=1167 · x_refsource_CONFIRM, x_transferred
- marc.info /?l=bugtraq&m=107695064204362&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
Sources
- CVE List: CVE-2004-0290
- NVD: CVE-2004-0290
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.