CVE-2007-5247

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2007-10-01T00:00:00.000Z", "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-15T20:57:01.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "45530", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/45530"}, {"tags": ["x_refsource_MISC"], "url": "http://aluigi.altervista.org/adv/fearfspb-adv.txt"}, {"tags": ["x_refsource_MISC"], "url": "http://aluigi.org/poc/fearfspb.zip"}, {"name": "20071001 Format string in F.E.A.R. 1.08 through PB", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/481231/100/0/threaded"}, {"name": "3197", "tags": ["third-party-advisory", "x_refsource_SREASON"], "url": "http://securityreason.com/securityalert/3197"}, {"name": "45531", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://osvdb.org/45531"}, {"name": "fear-punkbuster-format-string(36900)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36900"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2007-5247", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "45530", "refsource": "OSVDB", "url": "http://osvdb.org/45530"}, {"name": "http://aluigi.altervista.org/adv/fearfspb-adv.txt", "refsource": "MISC", "url": "http://aluigi.altervista.org/adv/fearfspb-adv.txt"}, {"name": "http://aluigi.org/poc/fearfspb.zip", "refsource": "MISC", "url": "http://aluigi.org/poc/fearfspb.zip"}, {"name": "20071001 Format string in F.E.A.R. 1.08 through PB", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/481231/100/0/threaded"}, {"name": "3197", "refsource": "SREASON", "url": "http://securityreason.com/securityalert/3197"}, {"name": "45531", "refsource": "OSVDB", "url": "http://osvdb.org/45531"}, {"name": "fear-punkbuster-format-string(36900)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36900"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-07T15:24:42.139Z"}, "title": "CVE Program Container", "references": [{"name": "45530", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/45530"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://aluigi.altervista.org/adv/fearfspb-adv.txt"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://aluigi.org/poc/fearfspb.zip"}, {"name": "20071001 Format string in F.E.A.R. 1.08 through PB", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/481231/100/0/threaded"}, {"name": "3197", "tags": ["third-party-advisory", "x_refsource_SREASON", "x_transferred"], "url": "http://securityreason.com/securityalert/3197"}, {"name": "45531", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://osvdb.org/45531"}, {"name": "fear-punkbuster-format-string(36900)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36900"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2007-5247", "datePublished": "2007-10-06T17:00:00.000Z", "dateReserved": "2007-10-06T00:00:00.000Z", "dateUpdated": "2024-08-07T15:24:42.139Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:monolith_productions:first_encounter_assault_recon:*:*:*:*:*:*:*:*", "matchCriteriaId": "5F17E592-FE6A-44DD-B70F-BCAEED1A4C76", "versionEndIncluding": "1.08", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon (F.E.A.R.) 1.08 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server on UDP port 27888 or (2) a PB_U packet to UCON on UDP port 27888, different vectors than CVE-2004-1500. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de formato de cadena en el motor Monolith Lithtech, utilizado en First Encounter Assault Recon (F.E.A.R.) 1.08 y anteriores, cuando Punkbuster (PB) est\u00e1 habilitado, permite a atacantes remotos ejecutar c\u00f3digo de su elecci\u00f3n o provocar denegaci\u00f3n de servicio (caida de demonio) a trav\u00e9s de un formato de cadena espec\u00edfico en (1) un paquete PB_Y en el servidor YPG sobre UDP puerto 27888 o (2) un paquete PB_U en UCON sobre UDP puerto 27888, vectores diferentes que CVE-2004-1500. NOTA: este asunto podr\u00eda estar en Punkbuster por si mismo, pero hay pocos detalles para estar seguros."}], "id": "CVE-2007-5247", "lastModified": "2026-06-16T22:45:44.170", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "MEDIUM", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "COMPLETE", "baseScore": 9.3, "confidentialityImpact": "COMPLETE", "integrityImpact": "COMPLETE", "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C", "version": "2.0"}, "exploitabilityScore": 8.6, "impactScore": 10.0, "obtainAllPrivilege": true, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2007-10-06T17:17:00.000", "references": [{"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://aluigi.altervista.org/adv/fearfspb-adv.txt"}, {"source": "cve@mitre.org", "tags": ["Exploit"], "url": "http://aluigi.org/poc/fearfspb.zip"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/45530"}, {"source": "cve@mitre.org", "url": "http://osvdb.org/45531"}, {"source": "cve@mitre.org", "url": "http://securityreason.com/securityalert/3197"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/481231/100/0/threaded"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36900"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://aluigi.altervista.org/adv/fearfspb-adv.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit"], "url": "http://aluigi.org/poc/fearfspb.zip"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/45530"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://osvdb.org/45531"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://securityreason.com/securityalert/3197"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/481231/100/0/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36900"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-134"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}