{"id":"CVE-2004-2099","aliases":["EUVD-2004-2091","GHSA-f7fj-h5q7-jhfq"],"status":"published","title":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier,...","description":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.","severity":{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.04281,"percentile":0.91164,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:00Z","exploits":[{"source":"exploitdb","id":"EDB-147","title":"Need for Speed 2 - Remote Client Buffer Overflow (PoC)","type":"dos","platform":"windows","date":"2004-01-23","verified":true,"url":"https://www.exploit-db.com/exploits/147"}],"products":[{"vendor":"electronic_arts","product":"need_for_speed_hot_pursuit_2"}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/14909","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://marc.info/?l=bugtraq\u0026m=107479094508691\u0026w=2","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://aluigi.altervista.org/adv/nfshp2cbof-adv.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"http://www.securityfocus.com/bid/9473","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2004-2099"},{"url":"https://github.com/advisories/GHSA-f7fj-h5q7-jhfq"}],"sources":{"cve":[{"id":"CVE-2004-2099","description":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.","status":"published","published":"2005-05-27T04:00:00Z","modified":"2024-08-08T01:15:01.556Z","updated_at":"2026-11-02T14:34:53.357376Z"}],"euvd":[{"id":"EUVD-2004-2091","description":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.","status":"published","published":"2005-05-27T04:00:00Z","modified":"2024-08-08T01:15:01Z","updated_at":"2026-11-03T01:15:11.805898Z"}],"ghsa":[{"id":"GHSA-f7fj-h5q7-jhfq","title":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier,...","description":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.","status":"published","published":"2022-04-29T03:00:48Z","modified":"2023-01-30T05:04:01Z","updated_at":"2026-11-02T14:46:57.494982Z"}],"nvd":[{"id":"CVE-2004-2099","description":"Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.","status":"published","published":"2004-12-31T05:00:00Z","modified":"2026-06-16T22:09:00.68Z","cvss":[{"version":"2.0","score":5.1,"vector":"AV:N/AC:H/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:00:52.459805Z"}]}}