PT-2009-6145 · Even Balance · Even Balance Punkbuster

Luigi Auriemma · Publicado 2009-11-10 · Atualizado 2017-08-17 · CVE-2009-3924

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Even Balance PunkBuster version 1.728 or earlier

Description The issue is related to a buffer overflow in the pbsv.dll component used by Even Balance PunkBuster. This can be exploited by remote attackers who send a long restart packet, potentially causing a denial of service through an application server crash and possibly allowing the execution of arbitrary code.

Recommendations For Even Balance PunkBuster version 1.728 or earlier, consider disabling the use of the pbsv.dll component until a patch or updated version is available to prevent potential exploitation.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-3924

Produtos afetados

Even Balance Punkbuster

Referências · 5

• http://aluigi.org/poc/sof2pbbof.zip · Correção
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 · Nota
• http://secunia.com/advisories/36221 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-3924 · Nota de Segurança
• http://aluigi.altervista.org/adv/sof2pbbof-adv.txt · Nota