CVEvulnerability
CVE-2009-3924
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2009-11-10
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.
Affected configurations
• raven software soldier of fortune 2
• punkbuster punkbuster (<= 1.728)
• punkbuster punkbuster 1.272
• punkbuster punkbuster 1.457
• punkbuster punkbuster 1.458
• punkbuster punkbuster 1.641
• punkbuster punkbuster 1.642
• punkbuster punkbuster 1.718
• punkbuster punkbuster 1.723
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aluigi.altervista.org/adv/sof2pbbof-adv.txt aluigi.altervista.org
- http://aluigi.org/poc/sof2pbbof.zip Patch
- http://secunia.com/advisories/36221 secunia.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/sof2pbbof-adv.txt aluigi.altervista.org
- http://aluigi.org/poc/sof2pbbof.zip Patch
- http://secunia.com/advisories/36221 secunia.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 exchange.xforce.ibmcloud.com