CVE-2007-4754

Published: Sep 8, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Format string vulnerability in the safe_bprintf function in acesrc/acebot_cmds.c in Alien Arena 2007 6.10 and earlier allows remote attackers to cause a denial of service (daemon crash) via format string specifiers in a nickname.

Affected (1)

Products: Cor Entertainment: Alien Arena 2007

Cor Entertainment

1 product

Alien Arena 2007

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Cor Entertainment Alien Arena 2007	Up to 6.10

Related CWEs

CWE-134

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (20)

http://aluigi.altervista.org/adv/aa2k7x-adv.txt

Source: cve@mitre.org

http://archives.neohapsis.com/archives/fulldisclosure/2007-09/0049.html

Source: cve@mitre.org

http://osvdb.org/40507

Source: cve@mitre.org

http://secunia.com/advisories/26819

Source: cve@mitre.org

http://securityreason.com/securityalert/3105

Source: cve@mitre.org

http://www.quakesrc.org/forums/viewtopic.php?t=6843&start=1

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/478628/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25559

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2007/3169

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/36463

Source: cve@mitre.org

http://aluigi.altervista.org/adv/aa2k7x-adv.txt