CVEvulnerability
CVE-2007-5262
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2007-10-08
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-134
Description
Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.
Affected configurations
• battlefront dropteam (<= 1.3.3)
Related
Weakness · CWE (1)
- CWE-134 Use of Externally-Controlled Format String weakness
References
- http://aluigi.altervista.org/adv/dropteamz-adv.txt Exploit
- http://secunia.com/advisories/27107 Vendor Advisory
- http://securityreason.com/securityalert/3202 securityreason.com
- http://www.securityfocus.com/archive/1/481616/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25943 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36974 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/dropteamz-adv.txt Exploit
- http://secunia.com/advisories/27107 Vendor Advisory
- http://securityreason.com/securityalert/3202 securityreason.com
- http://www.securityfocus.com/archive/1/481616/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/25943 Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36974 exchange.xforce.ibmcloud.com