NVD

Id
57324  
Name
CVE-2007-5248  
Description
Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server or (2) a PB_U packet to UCON. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2007-10-06  
Modified Date
2011-03-07  
Seq
2007-5248  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
292802 57324 CVE-2007-5248 http://aluigi.altervista.org/adv/d3engfspb-adv.txt  View
292803 57324 CVE-2007-5248 http://aluigi.org/poc/d3engfspb.zip  View
292804 57324 CVE-2007-5248 3196  View
292805 57324 CVE-2007-5248 20071001 Format string in the Doom 3 engine through PB  View
292806 57324 CVE-2007-5248 25893  View
292807 57324 CVE-2007-5248 ADV-2007-3333  View
292808 57324 CVE-2007-5248 doom3engine-punkbuster-format-string(36899)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
55784 JVNDB-2007-004476 Doom 3 などの製品で使用される ID Software Doom 3 エンジンにおけるサービス運用妨害 (DoS) の脆弱性 Doom 3、Quake 4、Prey で使用される ID Software Doom 3 エンジンには、Punkbuster (PB) が有効になっている際、任意のコードを実行される、またはサービス運用妨害 (デーモンクラッシュ) 状態となる脆弱性が存在します。 CVE-2007-5248 28603 CVE-2007-5248 57324 9.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-004476.html 2007-10-06 2012-09-25 View