{"id":"CVE-2007-5262","aliases":["EUVD-2007-5242","GHSA-246x-mh97-f8h6"],"status":"published","title":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote...","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.03506,"percentile":0.8926,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-134"],"published":"2007-10-08T21:00:00Z","modified":"2026-06-16T22:45:45Z","products":[{"vendor":"battlefront","product":"dropteam"}],"references":[{"url":"http://aluigi.altervista.org/adv/dropteamz-adv.txt","tags":["x_refsource_MISC","x_transferred","Exploit"]},{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974","tags":["vdb-entry","x_refsource_XF","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/481616/100/0/threaded","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"]},{"url":"http://www.securityfocus.com/bid/25943","tags":["vdb-entry","x_refsource_BID","x_transferred","Exploit"]},{"url":"http://secunia.com/advisories/27107","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Vendor Advisory"]},{"url":"http://securityreason.com/securityalert/3202","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5262"},{"url":"https://github.com/advisories/GHSA-246x-mh97-f8h6"}],"sources":{"cve":[{"id":"CVE-2007-5262","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","status":"published","published":"2007-10-08T21:00:00Z","modified":"2024-08-07T15:24:42.367Z","updated_at":"2026-11-02T13:32:00.617893Z"}],"euvd":[{"id":"EUVD-2007-5242","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","status":"published","published":"2007-10-08T21:00:00Z","modified":"2024-08-07T15:24:42Z","updated_at":"2026-11-03T01:16:18.260819Z"}],"ghsa":[{"id":"GHSA-246x-mh97-f8h6","title":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote...","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","status":"published","published":"2022-05-01T18:31:49Z","modified":"2023-01-31T05:04:35Z","cwes":["CWE-134"],"updated_at":"2026-11-02T14:48:41.999229Z"}],"nvd":[{"id":"CVE-2007-5262","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","status":"published","published":"2007-10-08T21:17:00Z","modified":"2026-06-16T22:45:45.91Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-134"],"updated_at":"2026-11-02T14:01:21.141213Z"}]}}