CVE-2004-1500: Freeform Interactive Purge Jihad

Low severity, CVSS 2.1. EPSS: 1.9% chance of exploitation in the next 30 days.

Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.

Affected products

• Freeform Interactive Purge Jihad: version 2.2.1 only
• Monolith Productions Alien Versus Predator: version 2.1.0.9.6 only
• Monolith Productions Blood: version 2.2.1 only
• Monolith Productions Contract Jack: version 1.1 only
• Monolith Productions Global Operations: version 2.0 only; version 2.1 only
• Monolith Productions Kiss Psycho Circus: version 1.13 only
• Monolith Productions Legends Of Might And Magic: version 1.1 only
• Monolith Productions No One Lives Forever: version 1.0.004 only; version 2.1.3 only
• Monolith Productions Sanity: version 1.0 only
• Monolith Productions Shogo: version 2.2 only
• Monolith Productions Tron: version 2.0.1.42 only

Published 2004-12-31. Last modified 2026-06-16.