7.5high

CVE-2004-0735in critical feed3 exploits

Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and ear…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
62.1%
percentile 99%
Public exploits
3
Exploit-DB

Summary

Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.

Exploit prediction (EPSS)

62.11% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-826 Medal of Honor Spearhead (Linux) - Server Remote Buffer Overflow · remote · 2005-02-18
  • EDB-357 Medal of Honor - Remote Buffer Overflow (PoC) · dos · 2004-07-20
  • EDB-16695 Medal of Honor Allied Assault - getinfo Stack Buffer Overflow (Metasploit) · remote · 2010-05-09

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.