CVE Vulnerability

CVE-2007-4508

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.

6.8 /10

CVSS v2.0 :

V3 Legend

Vector :

Exploitability : 8.6 / Impact : 6.4

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

Scope

References
Link Resource
http://www.securityfocus.com/bid/25411 Exploit
http://aluigi.altervista.org/adv/asurabof-adv.txt
http://secunia.com/advisories/24023
http://secunia.com/advisories/26571
http://securityreason.com/securityalert/3053
http://osvdb.org/39799
http://www.vupen.com/english/advisories/2007/2955
http://www.vupen.com/english/advisories/2007/2956
https://exchange.xforce.ibmcloud.com/vulnerabilities/36221
http://www.securityfocus.com/archive/1/477357/100/0/threaded
Configurations

Configuration 1

cpe:2.3:a:rival_interactive:prism:*:*:*:*:*:*:*:*
cpe:2.3:a:rebellion:rogue_trooper:*:*:*:*:*:*:*:*
Information

Published : 2007-08-23 07:17

Updated : 2018-10-15 09:35

NVD link : CVE-2007-4508

Mitre link : CVE-2007-4508

Products Affected
No products.
CWE
NVD-CWE-Other