CVE-2020-26037

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code...

CVE-2020-26037

The CVE-2020-26037 issue affects Even Balance Punkbuster (server functionality). A Directory Traversal vulnerability in Punkbuster versions 1.902 through 1.904 allows remote attackers to execute arbitrary code due to improper handling of file paths. The vulnerability enables code execution withou...

PT-2023-11745 · Even Balance · Even Balance Punkbuster

Name of the Vulnerable Software and Affected Versions: Even Balance Punkbuster versions 1.902 through 1.904 Description: The issue allows remote attackers to execute arbitrary code due to a Directory Traversal vulnerability in the Server functionality. Recommendations: For Even Balance Punkbuster...

Even Balance Punkbuster path traversal vulnerability

Even Balance Punkbuster is an anti-cheat system for multiplayer online games from Even designed to detect and prevent cheating. A security vulnerability exists in Even Balance Punkbuster versions prior to 1.902 through 1.905, which stems from a directory traversal vulnerability. An attacker can...

CVE-2020-26037: Improper Limitation of a Pathname to a Restricted Directory

Directory Traversal vulnerability in Server functionalty in Even Balance Punkbuster version 1.902 before 1.905 allows remote attackers to execute arbitrary code...

punkbuster.com Cross Site Scripting vulnerability OBB-2981782

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Epic Games Unreal Engine Logging Function - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to...

PunkBuster < 1.229 (WebTool Service) Remote Buffer Overflow DoS

No description provided by source. Luigi Auriemma Application: PunkBuster http://www.punkbuster.com Versions: PunkBuster for servers, versions minor than v1.229: America's Army = v1.228 Battlefield 1942 = v1.158 Battlefield 2 = v1.184 Battlefield Vietnam = v1.150 Call of Duty = v1.173 Call of Dut...

Buffer overflow

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service application server crash and possibly execute arbitrary code via a long restart packet...

CVE-2009-3924

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service application server crash and possibly execute arbitrary code via a long restart packet...

CVE-2009-3924

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service application server crash and possibly execute arbitrary code via a long restart packet...

CVE-2009-3924

The CVE-2009-3924 entry describes a buffer overflow in pbsv.dll used by Soldier of Fortune II (and possibly other apps) when Even Balance PunkBuster 1.728 or earlier is enabled. The underlying flaw allows remote attackers to crash the application server (denial of service) and potentially execute...

CVE-2009-3924: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service application server crash and possibly execute arbitrary code via a long restart packet...

Format string

Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon F.E.A.R. 1.08 and earlier, when Punkbuster PB is enabled, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in 1 a...

Buffer overflow

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

Design/Logic Flaw

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

Format string

Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster PB is enabled, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format...

CVE-2007-5247

Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon F.E.A.R. 1.08 and earlier, when Punkbuster PB is enabled, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in 1 a...

CVE-2007-5248

Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster PB is enabled, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format...

CVE-2007-5247

Multiple format string vulnerabilities in the Monolith Lithtech engine, as used by First Encounter Assault Recon F.E.A.R. 1.08 and earlier, when Punkbuster PB is enabled, allow remote attackers to execute arbitrary code or cause a denial of service daemon crash via format string specifiers in 1 a...