<?xml version="1.0" encoding="UTF-8"?><?xml-stylesheet type="text/xsl" href="../assets/feed.xsl"?><rss version="2.0"><channel><title>PatchTheCVE: monolith productions</title><link>https://patchthecve.com/</link><description>CVEs with upgrade or downgrade fix steps</description><item><title>CVE-2007-5247: Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Rec</title><link>https://patchthecve.com/cve/CVE-2007-5247.html</link><guid>https://patchthecve.com/cve/CVE-2007-5247.html</guid><pubDate>Tue, 16 Jun 2026 22:45:44 +0000</pubDate><description>HIGH 9.3: Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in </description></item><item><title>CVE-2004-1587: Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 a</title><link>https://patchthecve.com/cve/CVE-2004-1587.html</link><guid>https://patchthecve.com/cve/CVE-2004-1587.html</guid><pubDate>Tue, 16 Jun 2026 22:07:59 +0000</pubDate><description>MEDIUM 5.0: Buffer overflow in Monolith games including (1) Alien versus Predator 2 1.0.9.6 and earlier, (2) Blood 2 2.1 and earlier, (3) No one lives forever 1.004 and earlier and (4) Shogo 2.2 and earlier allows remote attackers to cause a denial of service (application crash) via a long secure Gamespy query.</description></item><item><title>CVE-2004-1500: Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated use</title><link>https://patchthecve.com/cve/CVE-2004-1500.html</link><guid>https://patchthecve.com/cve/CVE-2004-1500.html</guid><pubDate>Tue, 16 Jun 2026 22:07:49 +0000</pubDate><description>LOW 2.1: Format string vulnerability in the Lithtech engine, as used in multiple games, allows remote authenticated users to cause a denial of service (application crash) via format string specifiers in (1) a nickname or (2) a message.</description></item><item><title>CVE-2004-1395: The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier,</title><link>https://patchthecve.com/cve/CVE-2004-1395.html</link><guid>https://patchthecve.com/cve/CVE-2004-1395.html</guid><pubDate>Tue, 16 Jun 2026 22:07:37 +0000</pubDate><description>MEDIUM 5.0: The Lithtech engine, as used in (1) Contract Jack 1.1 and earlier, (2) No one lives forever 2 1.3 and earlier, (3) Tron 2.0 1.042 and earlier, (4) F.E.A.R. (First Encounter Assault and Recon), and possibly other games, allows remote attackers to cause a denial of service (connection refused) via a U</description></item></channel></rss>