CVE-2004-1869

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Etherlords I 1.07 and earlier and Etherlords II 1.03 and earlier allows remote attackers to cause a denial of service (crash) by sending a packet that specifies the size for the next packet, then sending a larger packet than specified, which causes Etherlords to read unallocated memory.

Affected products

Nival Interactive Etherlords: 1.0, 1.0_1, 1.0_2, 1.0_3, 1.0_4, 1.0_5 (+2)
Nival Interactive Etherlords Ii: 1.0, 1.0_1, 1.0_2, 1.0_3

References

http://aluigi.altervista.org/adv/ethboom-adv.txt
http://marc.info/?l=bugtraq&m=108024309814423&w=2
http://www.securityfocus.com/bid/9979
https://exchange.xforce.ibmcloud.com/vulnerabilities/15618
https://exchange.xforce.ibmcloud.com/vulnerabilities/15619
http://aluigi.altervista.org/adv/ethboom-adv.txt
http://marc.info/?l=bugtraq&m=108024309814423&w=2
http://www.securityfocus.com/bid/9979
https://exchange.xforce.ibmcloud.com/vulnerabilities/15618
https://exchange.xforce.ibmcloud.com/vulnerabilities/15619

Get alerted when CVE-2004-1869 or the next vulnerability affects your stack