CVE-2004-1500

· N/AModified

← All CVEs

CVSS v3.1

N/A

EPSS

1.88%

Published

Dec 31, 2004

Modified

Jun 16, 2026

Public PoC / Exploit (1)

All weaponized →

Exploit-DBMonolith Lithtech Game Engine - Multiple Remote Format String Vulnerabilities

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Affected Products (13)

freeform_interactive · purge_jihadvulnerable

monolith_productions · alien_versus_predatorvulnerable

monolith_productions · bloodvulnerable

monolith_productions · contract_jackvulnerable

monolith_productions · global_operationsvulnerable

monolith_productions · kiss_psycho_circusvulnerable

monolith_productions · legends_of_might_and_magicvulnerable

monolith_productions · no_one_lives_forevervulnerable

monolith_productions · sanityvulnerable

monolith_productions · shogovulnerable

monolith_productions · tronvulnerable

References (12)

http://aluigi.altervista.org/adv/lithfs-adv.txt

http://marc.info/?l=bugtraq&m=109969394601331&w=2

http://secunia.com/advisories/13116/

Vendor Advisory

http://secunia.com/advisories/17317

http://www.securityfocus.com/bid/11610

https://exchange.xforce.ibmcloud.com/vulnerabilities/17972