Luigi Auriemma has reported a vulnerability in PunkBuster, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially to compromise a vulnerable system.

The vulnerability is caused due to a format string error in the PunkBuster server when kicking a client that has an invalid cvars value. This can be exploited to crash the server and may allow arbitrary code execution, by configuring the monitored cvars on a client to include format string specifiers.

The vulnerability has been reported in version 1.180 and prior.

Note: The vulnerability is reportedly exploitable via Soldier of Fortune II with PunkBuster enabled.

Solution
The vulnerability has reportedly been fixed by the vendor.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/sof2pbfs-adv.txt

Deep Links
Links available in Customer Area