PT-2009-6145 · Even Balance · Even Balance Punkbuster

Luigi Auriemma · Published 2009-11-10 · Updated 2017-08-17 · CVE-2009-3924

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Even Balance PunkBuster version 1.728 or earlier

Description The issue is related to a buffer overflow in the pbsv.dll component used by Even Balance PunkBuster. This can be exploited by remote attackers who send a long restart packet, potentially causing a denial of service through an application server crash and possibly allowing the execution of arbitrary code.

Recommendations For Even Balance PunkBuster version 1.728 or earlier, consider disabling the use of the pbsv.dll component until a patch or updated version is available to prevent potential exploitation.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2009-3924

Affected Products

Even Balance Punkbuster

References · 5

• http://aluigi.org/poc/sof2pbbof.zip · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2009-3924 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52400 · Note
• http://secunia.com/advisories/36221 · Note
• http://aluigi.altervista.org/adv/sof2pbbof-adv.txt · Note