CVE-2004-2099: Electronic Arts Need For Speed Hot Pursuit 2

Medium severity, CVSS 5.1. EPSS: 4.3% chance of exploitation in the next 30 days.

Buffer overflow in Need for Speed Hot Pursuit 2.0 client (NFSHP2), version 242 and earlier, allows remote attackers (servers) to execute arbitrary code via long (1) gamename, (2) gamever, (3) hostname, (4) gametype, (5) mapname or (6) gamemode commands.

Affected products

• Electronic Arts Need For Speed Hot Pursuit 2: up to and including 242.0

Published 2004-12-31. Last modified 2026-06-16.