VULNERABILITY INTELLIGENCE

CVE-2006-0771

CVSS score6.4 MEDIUM
EPSS probability3.13%
CISA KEVNot currently listed
Published2006-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:N/I:P/A:P

Description

Format string vulnerability in PunkBuster 1.180 and earlier, as used by Soldier of Fortune II and possibly other games, allows remote attackers to cause a denial of service (server crash) and possibly execute arbitrary code via format string specifiers in invalid cvar values, which are not properly handled when the server kicks the player and records the reason.

Weakness classification

  • CWE-134: Use of Externally-Controlled Format String

Primary references