CVE-2001-0964 Memory corruption in n/a

High 7.5 Published 2 Feb 2002 Updated 8 Aug 2024

A buffer overflow in the Half-Life client allows remote servers to execute arbitrary code when a user connects to a malicious server.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Over the internet
Victim action needed: A user has to click or open something
Fix: None listed

What is CVE-2001-0964?

CVE-2001-0964 is a high-severity memory corruption vulnerability in n/a, published on 2 Feb 2002. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.

Official description

Buffer overflow in client for Half-Life 1.1.0.8 and earlier allows malicious remote servers to execute arbitrary code via a long console command.

Which versions are affected by CVE-2001-0964?

It affects 1 product.

Products include Valve Software Half-Life.

How do I fix CVE-2001-0964?

No fix has been published for CVE-2001-0964 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2001-0964 being exploited?

There is no known exploitation of CVE-2001-0964 in the wild and no public exploit code.

Sources

Also known as GHSA-rqf6-27m3-3pm2.