What’s Vulnerable › Vulnerabilities

CVE-2004-1500

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.9% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2004-12-31 · updated 2026-06-16

Description

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Affected products

• Freeform Interactive Purge Jihad: 2.2.1
• Monolith Productions Alien Versus Predator: 2.1.0.9.6
• Monolith Productions Blood: 2.2.1
• Monolith Productions Contract Jack: 1.1
• Monolith Productions Global Operations: 2.0, 2.1
• Monolith Productions Kiss Psycho Circus: 1.13
• Monolith Productions Legends Of Might And Magic: 1.1
• Monolith Productions No One Lives Forever: 1.0.004, 2.1.3
• Monolith Productions Sanity: 1.0
• Monolith Productions Shogo: 2.2
• Monolith Productions Tron: 2.0.1.42

References

• http://aluigi.altervista.org/adv/lithfs-adv.txt
• http://marc.info/?l=bugtraq&m=109969394601331&w=2
• http://secunia.com/advisories/13116/
• http://secunia.com/advisories/17317
• http://www.securityfocus.com/bid/11610
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17972
• http://aluigi.altervista.org/adv/lithfs-adv.txt
• http://marc.info/?l=bugtraq&m=109969394601331&w=2
• http://secunia.com/advisories/13116/
• http://secunia.com/advisories/17317
• http://www.securityfocus.com/bid/11610
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17972

Get alerted when CVE-2004-1500 or the next vulnerability affects your stack