CVE-2004-1500

Published: Dec 31, 2004Modified: Apr 16, 2026

2.1

Vector

AV:L/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 3.9 / Impact: 2.9

Source: NVD

Description

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Affected (13)

Products: Freeform Interactive: Purge Jihad · Monolith Productions: Alien Versus Predator, Blood, Contract Jack, Global Operations, Kiss Psycho Circus, Legends Of Might And Magic, No One Lives Forever, Sanity, Shogo, Tron

Freeform Interactive

1 product

Purge Jihad

Monolith Productions

10 products

Alien Versus Predator

Legends Of Might And Magic

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Freeform Interactive Purge Jihad	Version 2.2.1
Monolith Productions Alien Versus Predator	Version 2.1.0.9.6
Monolith Productions Blood	Version 2.2.1
Monolith Productions Contract Jack	Version 1.1
Monolith Productions Global Operations	Version 2.0
Monolith Productions Global Operations	Version 2.1
Monolith Productions Kiss Psycho Circus	Version 1.13
Monolith Productions Legends Of Might And Magic	Version 1.1
Monolith Productions No One Lives Forever	Version 1.0.004
Monolith Productions No One Lives Forever	Version 2.1.3
Monolith Productions Sanity	Version 1.0
Monolith Productions Shogo	Version 2.2
Monolith Productions Tron	Version 2.0.1.42