Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2009-3924

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.

Published

2009-11-10T02:30:00.267

Last Modified

2025-04-09T00:30:58.490

Status

Deferred

Source

[email protected]

Severity

CVSSv2: 9.3 (HIGH)

CVSSv2 Vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

  • Access Vector: NETWORK
  • Access Complexity: MEDIUM
  • Authentication: NONE
  • Confidentiality Impact: COMPLETE
  • Integrity Impact: COMPLETE
  • Availability Impact: COMPLETE
Exploitability Score

8.6

Impact Score

10.0

Weaknesses
  • Type: Primary
    CWE-119
Affected Vendors & Products
Type Vendor Product Version/Range Vulnerable?
Application raven_software soldier_of_fortune_2 * Yes
Application punkbuster punkbuster ≤ 1.728 Yes
Application punkbuster punkbuster 1.272 Yes
Application punkbuster punkbuster 1.457 Yes
Application punkbuster punkbuster 1.458 Yes
Application punkbuster punkbuster 1.641 Yes
Application punkbuster punkbuster 1.642 Yes
Application punkbuster punkbuster 1.718 Yes
Application punkbuster punkbuster 1.723 Yes
References