CVE-2004-2371

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Multiple Red Storm web-based games, including Ghost Recon 1.4 and earlier, Desert Siege, and The Sum of all Fears 1.1.1.0 and earlier, do not properly check return values from certain functions, which allows remote attackers to cause a denial of service (hang) via packets that contain text strings with incorrect size values.

Affected products

Redstorm Desert Siege: all versions
Redstorm Ghost Recon: 1.4
Redstorm The Sum Of All Fears: 1.1.1.0

References

http://aluigi.altervista.org/adv/grboom-adv.txt
http://www.securityfocus.com/archive/1/355051
http://www.securityfocus.com/bid/9738
http://www.zone-h.org/advisories/read/id=4038
https://exchange.xforce.ibmcloud.com/vulnerabilities/15305
http://aluigi.altervista.org/adv/grboom-adv.txt
http://www.securityfocus.com/archive/1/355051
http://www.securityfocus.com/bid/9738
http://www.zone-h.org/advisories/read/id=4038
https://exchange.xforce.ibmcloud.com/vulnerabilities/15305

Get alerted when CVE-2004-2371 or the next vulnerability affects your stack