CVEvulnerability
CVE-2006-0771
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2006-02-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:P
- Weaknesses
- CWE-134
Description
Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason.
Affected configurations
• even balance punkbuster (<= 1.180)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://aluigi.altervista.org/adv/sof2pbfs-adv.txt aluigi.altervista.org
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html archives.neohapsis.com
- http://secunia.com/advisories/18917 Vendor Advisory
- http://securityreason.com/securityalert/448 securityreason.com
- http://www.securityfocus.com/archive/1/425286/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16703 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24792 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/sof2pbfs-adv.txt aluigi.altervista.org
- http://archives.neohapsis.com/archives/fulldisclosure/2006-02/0372.html archives.neohapsis.com
- http://secunia.com/advisories/18917 Vendor Advisory
- http://securityreason.com/securityalert/448 securityreason.com
- http://www.securityfocus.com/archive/1/425286/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/16703 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/24792 exchange.xforce.ibmcloud.com