CVE-2007-5262 Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3...
HighCVSS 7.5
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| battlefront dropteam | <= 1.3.3 | No fix listed |
References
- aluigi.altervista.org exploit
- 27107 third-party-advisory vendor-advisory
- 3202 third-party-advisory
- 20071005 Multiple vulnerabilities in Dropteam 1.3.3 mailing-list
- 25943 exploit vdb-entry
- dropteam-0x1packet-format-string(36974) vdb-entry