CVE-2004-0735

Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors.

CVSS v2.0 7.5 HIGH

7.5^/10

CVSS v2.0 : HIGH

Vector : AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability : 10.0 / Impact : 6.4

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://marc.info/?l=bugtraq&m=109008314631518&w=2
http://www.securityfocus.com/bid/10743	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16715
http://marc.info/?l=bugtraq&m=109008314631518&w=2
http://www.securityfocus.com/bid/10743	Exploit Patch Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/16715

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.0:::::::*
	cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.1:::::::*
	cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.11_v9:::::::*
	cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:breakthrough_2.40_b:::::::*
	cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:spearhead_2.15:::::::*

History

20 Nov 2024, 23:49

Type	Values Removed	Values Added
References	~~() http://marc.info/?l=bugtraq&m=109008314631518&w=2 -~~	() http://marc.info/?l=bugtraq&m=109008314631518&w=2 -
References	~~() http://www.securityfocus.com/bid/10743 - Exploit, Patch, Vendor Advisory~~	() http://www.securityfocus.com/bid/10743 - Exploit, Patch, Vendor Advisory
References	~~() https://exchange.xforce.ibmcloud.com/vulnerabilities/16715 -~~	() https://exchange.xforce.ibmcloud.com/vulnerabilities/16715 -

Information

Published : 2004-07-27 04:00

Updated : 2024-11-20 23:49

NVD link : CVE-2004-0735

Mitre link : CVE-2004-0735

CVE.ORG link : CVE-2004-0735

JSON object : View

Products Affected

electronic_arts

medal_of_honor_allied_assault

CWE

NVD-CWE-Other

{"id": "CVE-2004-0735", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 7.5, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "LOW", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "HIGH", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": true, "userInteractionRequired": false}]}, "published": "2004-07-27T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=109008314631518&w=2", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/10743", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16715", "source": "cve@mitre.org"}, {"url": "http://marc.info/?l=bugtraq&m=109008314631518&w=2", "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/10743", "tags": ["Exploit", "Patch", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16715", "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Buffer overflow in Medal of Honor (1) Allied Assault 1.11v9 and earlier, (2) Breakthrough 2.40b and earlier, and (3) Spearhead 2.15 and earlier, when playing on a Local Area Network (LAN), allows remote attackers to execute arbitrary code via vectors such as (1) the getinfo query, (2) the connect packet, and other unknown vectors."}, {"lang": "es", "value": "Desbordamiento de b\u00fafer en Medal of Honor (1) Allied Assault 1.11v9 y anteriores, (2) Breakthrough 2.40b y anteriores, and (3) Spearhead 2.15 y anteriores, cuando se juega en una red de \u00e1rea local, permite a atacantes remotos ejecutar c\u00f3digo arbitrario mediante vectores como (1) la consulta getinfo, (2), el paquete connect, y otros vectores desconocidos."}], "lastModified": "2024-11-20T23:49:17.030", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2ABB2616-D45D-48E0-AA59-5FEB44F783DE"}, {"criteria": "cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D758C35F-D787-43D6-9F5A-FC2065570867"}, {"criteria": "cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:1.11_v9:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "614B3CE8-724A-42A7-BEF3-60871C11C3D0"}, {"criteria": "cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:breakthrough_2.40_b:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "D7B50D8A-0076-4872-8814-19A782D8F7F6"}, {"criteria": "cpe:2.3:a:electronic_arts:medal_of_honor_allied_assault:spearhead_2.15:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A441807B-BC93-4AE5-A67C-817DFA4726F4"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}