Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason.
References
Configurations
History
No history.
Information
Published : 2006-02-18 21:02
Updated : 2024-02-28 10:42
NVD link : CVE-2006-0771
Mitre link : CVE-2006-0771
CVE.ORG link : CVE-2006-0771
JSON object : View
Products Affected
even_balance
- punkbuster
CWE
CWE-134
Use of Externally-Controlled Format String