CVE-2004-1539

Halo: Combat Evolved <= 1.05 - Denial of Service via Long Game Server Reply

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-1539. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Halo <= 1.05 by sending a maliciously crafted packet to crash the client. The PoC constructs a packet with an overly long 'hostname' field to trigger the crash.

Description

Halo: Combat Evolved 1.05 and earlier allows remote game servers to cause a denial of service (client crash) via a long value in a game server reply, which triggers a NULL dereference.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Luigi Auriemma · cdoswindows
https://www.exploit-db.com/exploits/651

This exploit targets a buffer overflow vulnerability in Halo <= 1.05 by sending a maliciously crafted packet to crash the client. The PoC constructs a packet with an overly long 'hostname' field to trigger the crash.

Classification
Working Poc 95%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: Halo <= 1.05
No auth needed
Prerequisites: Network access to the target Halo client
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (4)

Core 4
Core References
Exploit vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/11724
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/18196
Patch, Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/13273
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=110114770406920&w=2

Scores

EPSS 0.0308
EPSS Percentile 86.0%

Details

Status published
Products (4)
gearbox_software/halo_combat_evolved 1.2
gearbox_software/halo_combat_evolved 1.4
gearbox_software/halo_combat_evolved 1.5
gearbox_software/halo_combat_evolved 1.31
Published Dec 31, 2004
Tracked Since Feb 18, 2026