CVE-2007-5248

no score yetEPSS 7.5%

Multiple format string vulnerabilities in the ID Software Doom 3 engine, as used by Doom 3 1.3.1 and earlier, Quake 4 1.4.2 and earlier, and Prey 1.3 and earlier, when Punkbuster (PB) is enabled, allow remote attackers to execute arbitrary code or cause a denial of service (daemon crash) via format string specifiers in (1) a PB_Y packet to the YPG server or (2) a PB_U packet to UCON. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.

EPSS: 7.5% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWE: CWE-134
Published: 2007-10-06
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

id_software:doom_3
id_software:quake_4
take2games:prey

References

http://aluigi.altervista.org/adv/d3engfspb-adv.txt
http://aluigi.org/poc/d3engfspb.zip
http://secunia.com/advisories/27002
http://secunia.com/advisories/27023
http://secunia.com/advisories/27036

Check your stack JSON