Buffer Overflow Vulnerability in Need for Speed Hot Pursuit 2.0 by Electronic Arts
CVE-2004-2099

Currently unrated

Key Information:

Vendor: Electronic Arts
Status: Need For Speed Hot Pursuit 2
Vendor: CVE Published:; 31 December 2004

🔔 Create Electronic Arts Vulnerability Alert

What is CVE-2004-2099?

A buffer overflow vulnerability exists in the Need for Speed Hot Pursuit 2.0 client, allowing remote attackers to execute arbitrary code. This exploitation occurs through long input commands such as gamename, gamever, hostname, gametype, mapname, or gamemode, leading to severe security risks for users running vulnerable versions prior to 242. Players and server operators must ensure they are using updated software to mitigate potential remote attacks.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/14909

vdb-entryx_refsource_XF

http://marc.info/?l=bugtraq&m=107479094508691&w=2

mailing-listx_refsource_BUGTRAQ

http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt

x_refsource_MISC

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability Reserved
May 27, 2005
Vulnerability published
Dec 31, 2004

CVE-2004-2099 Data

JSON