Back

CVE-2005-2774

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in the nickname.

Published: Sep 2, 2005 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
lithium_software lithium_ii_mod *

GitHub Security Advisory GHSA-2c5v-4pcw-67jx

Format string vulnerability in Lithium II mod 1.24 for Quake 2 allows remote attackers to cause a...

Risk Scores

CVSS Score 5.0 / 10
EPSS Score 2.76%

Top 15% most likely to be exploited

Threat Score 20.8 / 100

Data Sources

NVD EPSS GitHub