CVE-2004-0345: Buffer overflow in Red Faction client 1.20 and earlier allows remote servers to execute arbitrary code via...

Security readout for executives and security teams

Red Faction client 1.20 and earlier can be crashed or taken over by a malicious remote game server using an overly long server name. The business risk is concentrated in legacy or unmanaged endpoints where this old game client is still installed and used. Exposure is likely limited to legacy Windows gaming endpoints running Red Faction client 1.20 or earlier. Enterprise exposure is probably low unless BYOD, lab, kiosk, or unmanaged desktops retain the game and can contact remote game servers. Prioritize as a cleanup item for legacy endpoint risk, not a broad enterprise emergency. Escalate if the software exists on privileged, shared, or production-adjacent systems, because successful exploitation could execute attacker-controlled code on the user workstation. Mitigation focus: Inventory and remove Red Faction client 1.20 or earlier from managed endpoints.; Check vendor or trusted archive guidance for any fixed client release.; Block or restrict use of untrusted external game servers where removal is not immediate..

Prepared

Jun 30, 2026, 06:41 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.