CVE-2004-2277

CVE-2004-2277 describes a buffer overflow vulnerability in the aGSM Half-Life client, affecting all versions of aGSM. This flaw allows malicious Half-Life servers to trigger a denial of service (crash) and potentially execute arbitrary code on client systems through an excessively long server response. The vulnerability has a CVSS score of 5.0, indicating a medium severity, with low attack complexity and no authentication required for exploitation. While not listed in CISA's KEV catalog, proof-of-concept exploit code is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion or media coverage.