CVE-2007-5262

Published: Oct 8, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a "0x01" packet.

Affected (1)

Products: Battlefront: Dropteam

Battlefront

1 product

Dropteam

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Battlefront Dropteam	Up to 1.3.3

Related CWEs

CWE-134

Use of Externally-Controlled Format String

The product uses a function that accepts a format string as an argument, but the format string originates from an external source.

References (12)

http://aluigi.altervista.org/adv/dropteamz-adv.txt

Source: cve@mitre.org

Exploit

http://secunia.com/advisories/27107

Source: cve@mitre.org

Vendor Advisory

http://securityreason.com/securityalert/3202

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/481616/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/25943

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/36974

Source: cve@mitre.org

http://aluigi.altervista.org/adv/dropteamz-adv.txt