VDB
CVE-2007-5250
CVE-2007-5250
PUBLISHED
CVSS 4.300000190734863 MEDIUM
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
EPSS 1.50% · 74.1th percentile
Risk Scores
CVSS 2.0
4.300000190734863
EPSS Score
1.50%
74.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| americasarmy | america\'s_army_special_forces | 0 |
| americasarmy | america\'s_army | 0 |
| n/a | n/a | n/a |
Timeline
- Oct 6, 2007 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 22, 2022 EPSS Score
- Jul 15, 2022 EPSS Score
- Oct 30, 2022 EPSS Score
- Dec 22, 2022 EPSS Score
- Feb 13, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 8, 2023 EPSS Score
- May 31, 2023 EPSS Score
- Jul 23, 2023 EPSS Score
References
- 20071001 Unexploitable buffer-overflow in America's Army 2.8.2 through PB mailing-list
- http://aluigi.org/poc/aaboompb.zip url
- 3193 third-party-advisory
- americasarmy-bell-dos(36898) vdb
- 27015 third-party-advisory
- http://aluigi.altervista.org/adv/aaboompb-adv.txt url
- https://nvd.nist.gov/vuln/detail/CVE-2007-5250 advisory