CVE-2004-2371 EXPLOIT
5.0
MEDIUM · CVSS 2.0 · EPSS 3.3% (pctl 88)
Patch early
A public exploit exists.
Description
Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.
Scoring
| CVSS | 5.0 (MEDIUM, v2.0) |
|---|---|
| Vector | AV:N/AC:L/Au:N/C:N/I:N/A:P |
| EPSS | 3.34% — more likely to be exploited than 88% of all CVEs |
| On CISA KEV | no |
| Public exploit | yes |
| Published | 2004-12-31 |
| Last modified | 2026-06-16 |
Affected (3)
| Vendor | Product |
|---|---|
| redstorm | desert siege |
| redstorm | ghost recon |
| redstorm | the sum of all fears |
Public exploits
| Source | Title | Date |
|---|---|---|
| exploit-db | RedStorm Ghost Recon Game Engine - Remote Denial of Service | 2004-02-24 |
References
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
- http://aluigi.altervista.org/adv/grboom-adv.txt
- http://www.securityfocus.com/archive/1/355051
- http://www.securityfocus.com/bid/9738
- http://www.zone-h.org/advisories/read/id=4038
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
→ the Explorer · watch your stack · NVD