CVE-2007-5248

🗓️ 06 Oct 2007 17:00:00Reported by mitreType

cve🔗 web.nvd.nist.gov👁 130 Views🌐 WEB

CVE-2007-5248: Multiple format string vulnerabilities in ID Software Doom 3 engin

Reporter	Title	Published	Views	Family All 5
Cvelist	CVE-2007-5248	6 Oct 200717:00	–	cvelist
Exploit DB	id Software Doom 3 Engine - Console String Visualization Format String	2 Oct 200700:00	–	exploitdb
EUVD	EUVD-2007-5228	7 Oct 202500:30	–	euvd
NVD	CVE-2007-5248	6 Oct 200717:17	–	nvd
Prion	Format string	6 Oct 200717:17	–	prion

NVD

Node

OR

id_software doom_3Range≤1.3.1

id_software quake_4Range≤1.4.2

take2games preyRange≤1.3

Source	Link
vupen	www.vupen.com/english/advisories/2007/3333
securityreason	www.securityreason.com/securityalert/3196
secunia	www.secunia.com/advisories/27002
securityfocus	www.securityfocus.com/archive/1/481229/100/0/threaded
secunia	www.secunia.com/advisories/27023
securityfocus	www.securityfocus.com/bid/25893
aluigi	www.aluigi.org/poc/d3engfspb.zip
aluigi	www.aluigi.altervista.org/adv/d3engfspb-adv.txt
exchange	www.exchange.xforce.ibmcloud.com/vulnerabilities/36899
secunia	www.secunia.com/advisories/27036

Parameter	Position	Path	Description	CWE
PB_Y	binary	/PB_Y	Format string vulnerability in Doom 3 engine via PB_Y packet	CWE-134
PB_U	binary	/PB_U	Format string vulnerability in Doom 3 engine via PB_U packet	CWE-134

16 Jun 2026 22:45Current

7.9High risk

Vulners AI Score7.9

CVSS 29.3

EPSS0.07483

cve-2007-5248 format string vulnerabilities id software doom 3 remote code execution denial of service punkbuster ypg server ucon