Back

CVE-2003-1381

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life Server, allows remote attackers to execute arbitrary commands via format string specifiers in the amx_say command.

Published: Dec 31, 2003 Modified: Jun 16, 2026
CWE-134

CVSS Metrics

Affected Products (1)

Vendor Product Version
amxmod.net amx_mod 0.9.2

GitHub Security Advisory GHSA-ghwm-jm66-72j7

Format string vulnerability in AMX 0.9.2 and earlier, a plugin for Valve Software's Half-Life...

Risk Scores

CVSS Score 6.8 / 10
EPSS Score 2.63%

Top 16% most likely to be exploited

Threat Score 28 / 100

Data Sources

NVD EPSS GitHub