CVE-2007-4508

critical

Description

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/36221

http://www.vupen.com/english/advisories/2007/2956

http://www.vupen.com/english/advisories/2007/2955

http://www.securityfocus.com/archive/1/477357/100/0/threaded

http://securityreason.com/securityalert/3053

http://secunia.com/advisories/26571

http://secunia.com/advisories/24023

http://osvdb.org/39799

http://aluigi.altervista.org/adv/asurabof-adv.txt

Details

Source: Mitre, NVD

Published: 2007-08-23

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 6.8

Vector: CVSS2#AV:N/AC:M/Au:N/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 9.8

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.06018