CVE-2007-4508
9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.28 Low
EPSS
Percentile
96.8%
Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.
| CPE | Name | Operator | Version |
|---|---|---|---|
| rival_interactive:prism | rival interactive prism | le | 1.1.1.0 |
| rebellion:rogue_trooper | rebellion rogue trooper | le | 1.0 |
References
aluigi.altervista.org/adv/asurabof-adv.txt
osvdb.org/39799
secunia.com/advisories/24023
secunia.com/advisories/26571
securityreason.com/securityalert/3053
www.securityfocus.com/archive/1/477357/100/0/threaded
www.securityfocus.com/bid/25411
www.vupen.com/english/advisories/2007/2955
www.vupen.com/english/advisories/2007/2956
exchange.xforce.ibmcloud.com/vulnerabilities/36221
9 High
AI Score
Confidence
Low
6.8 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:M/Au:N/C:P/I:P/A:P
0.28 Low
EPSS
Percentile
96.8%