NVD

Id
57323  
Name
CVE-2007-5247  
Description
Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-06  
Modified Date
2008-11-15  
Seq
2007-5247  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292797 57323 CVE-2007-5247 http://aluigi.altervista.org/adv/fearfspb-adv.txt  View
292798 57323 CVE-2007-5247 http://aluigi.org/poc/fearfspb.zip  View
292799 57323 CVE-2007-5247 3197  View
292800 57323 CVE-2007-5247 20071001 Format string in F.E.A.R. 1.08 through PB  View
292801 57323 CVE-2007-5247 fear-punkbuster-format-string(36900)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55783 JVNDB-2007-004475 F.E.A.R. で使用される Monolith Lithtech エンジンにおけるフォーマットストリングの脆弱性 First Encounter Assault Recon (F.E.A.R.) で使用される Monolith Lithtech エンジンには、Punkbuster (PB) が有効になっている際、フォーマットストリングの脆弱性が存在します。 CVE-2007-5247 28602 CVE-2007-5247 57323 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004475.html 2007-10-01 2012-09-25 View