CVE

Id
16875  
CVE No.
CVE-2006-0771  
Status
Candidate  
Description
Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason.  
Phase
Assigned (20060218)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
137453 16875 CVE-2006-0771 BUGTRAQ:20060216 Soldier of Fortune II format string through PunkBuster 1.180  View
137454 16875 CVE-2006-0771 URL:http://www.securityfocus.com/archive/1/archive/1/425286/100/0/threaded  View
137455 16875 CVE-2006-0771 FULLDISC:20060216 Soldier of Fortune II format string through PunkBuster 1.180  View
137456 16875 CVE-2006-0771 URL:http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html  View
137457 16875 CVE-2006-0771 BID:16703  View
137458 16875 CVE-2006-0771 URL:http://www.securityfocus.com/bid/16703  View
137459 16875 CVE-2006-0771 MISC:http://aluigi.altervista.org/adv/sof2pbfs-adv.txt  View
137460 16875 CVE-2006-0771 SECUNIA:18917  View
137461 16875 CVE-2006-0771 URL:http://secunia.com/advisories/18917  View
137462 16875 CVE-2006-0771 SREASON:448  View
137463 16875 CVE-2006-0771 URL:http://securityreason.com/securityalert/448  View
137464 16875 CVE-2006-0771 XF:punkbuster-cvars-format-string(24792)  View

Related JVN