5.0med
CVE-2004-23711 exploit
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do n…
Published 21 y ago · modified 4 mo ago · JSON
CVSS
5.0
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
3.3%
percentile 89%
Public exploits
1
Exploit-DB
Summary
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
Exploit prediction (EPSS)
3.34% probability of exploitation in the next 30 days, higher than 89% of all scored CVEs.
Exploits and detections
- EDB-23755 RedStorm Ghost Recon Game Engine - Remote Denial of Service · dos · 2004-02-24
CVSS scores
| Assigned by | Version | Score | Vector |
|---|---|---|---|
| NVD | 2.0 | 5.0 | AV:N/AC:L/Au:N/C:N/I:N/A:P |
References
- exchange.xforce.ibmcloud.com /vulnerabilities/15305 · vdb-entry, x_refsource_XF, x_transferred
- securityfocus.com /bid/9738 · vdb-entry, x_refsource_BID, x_transferred
- securityfocus.com /archive/1/355051 · mailing-list, x_refsource_BUGTRAQ, x_transferred
- zone-h.org /advisories/read/id=4038 · x_refsource_MISC, x_transferred
- aluigi.altervista.org /adv/grboom-adv.txt · x_refsource_MISC, x_transferred
Sources
- CVE List: CVE-2004-2371
- NVD: CVE-2004-2371
vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.