CVE-2007-5250
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army...
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
Exploit likelihood
What each source reports
NVD Score used
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
- Record
CVE-2007-5250- CVSS 2.0
- 4.3 Medium
AV:N/AC:M/Au:N/C:N/I:N/A:P - Weakness
- CWE-189
- Updated
- 2026-11-02
CVE List No score
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
- Record
CVE-2007-5250- Updated
- 2026-11-02
EUVDEUVD-2007-5230 No score
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
- Record
EUVD-2007-5230- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-q8hh-59h8-qrwc No score
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army...
The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.
- Record
GHSA-q8hh-59h8-qrwc- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| aliases, references, title | GitHub Advisories | |
| first indexed | CVE List, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2007-5250 is a medium vulnerability (CVSS 4.3) in Americasarmy America\'s Army, published October 6, 2007. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.50%, the 74th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/36898
securityfocus.com/archive/1/481227/100/0/threaded
aluigi.org/poc/aaboompb.zip
secunia.com/advisories/27015
aluigi.altervista.org/adv/aaboompb-adv.txt
securityreason.com/securityalert/3193
nvd.nist.gov/vuln/detail/CVE-2007-5250
github.com/advisories/GHSA-q8hh-59h8-qrwc