{"api_version":"1","generated_at":"2026-07-23T06:49:35+00:00","cve":"CVE-2007-5262","urls":{"html":"https://cve.report/CVE-2007-5262","api":"https://cve.report/api/cve/CVE-2007-5262.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2007-5262","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2007-5262"},"summary":{"title":"CVE-2007-5262","description":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","state":"PUBLISHED","assigner":"mitre","published_at":"2007-10-08 21:17:00","updated_at":"2026-04-23 00:35:47"},"problem_types":["CWE-134","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"7.5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"}}],"references":[{"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974","name":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"IBM X-Force Exchange","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/archive/1/481616/100/0/threaded","name":"http://www.securityfocus.com/archive/1/481616/100/0/threaded","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityFocus","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://secunia.com/advisories/27107","name":"http://secunia.com/advisories/27107","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"DropTeam Multiple Vulnerabilities - Advisories - Secunia","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://www.securityfocus.com/bid/25943","name":"http://www.securityfocus.com/bid/25943","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"DropTeam Multiple Remote Vulnerabilities","mime":"text/html","httpstatus":"200","archivestatus":"0"},{"url":"http://securityreason.com/securityalert/3202","name":"http://securityreason.com/securityalert/3202","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"SecurityReason - Multiple vulnerabilities in Dropteam 1.3.3","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://aluigi.altervista.org/adv/dropteamz-adv.txt","name":"http://aluigi.altervista.org/adv/dropteamz-adv.txt","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"text/plain","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2007-5262","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-5262","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2007","cve_id":"5262","vulnerable":"1","versionEndIncluding":"1.3.3","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"battlefront","cpe5":"dropteam","cpe6":"*","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T15:24:42.367Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"tags":["x_refsource_MISC","x_transferred"],"url":"http://aluigi.altervista.org/adv/dropteamz-adv.txt"},{"name":"dropteam-0x1packet-format-string(36974)","tags":["vdb-entry","x_refsource_XF","x_transferred"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974"},{"name":"20071005 Multiple vulnerabilities in Dropteam 1.3.3","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred"],"url":"http://www.securityfocus.com/archive/1/481616/100/0/threaded"},{"name":"25943","tags":["vdb-entry","x_refsource_BID","x_transferred"],"url":"http://www.securityfocus.com/bid/25943"},{"name":"27107","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/27107"},{"name":"3202","tags":["third-party-advisory","x_refsource_SREASON","x_transferred"],"url":"http://securityreason.com/securityalert/3202"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"datePublic":"2007-10-05T00:00:00.000Z","descriptions":[{"lang":"en","value":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2018-10-15T20:57:01.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"tags":["x_refsource_MISC"],"url":"http://aluigi.altervista.org/adv/dropteamz-adv.txt"},{"name":"dropteam-0x1packet-format-string(36974)","tags":["vdb-entry","x_refsource_XF"],"url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974"},{"name":"20071005 Multiple vulnerabilities in Dropteam 1.3.3","tags":["mailing-list","x_refsource_BUGTRAQ"],"url":"http://www.securityfocus.com/archive/1/481616/100/0/threaded"},{"name":"25943","tags":["vdb-entry","x_refsource_BID"],"url":"http://www.securityfocus.com/bid/25943"},{"name":"27107","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/27107"},{"name":"3202","tags":["third-party-advisory","x_refsource_SREASON"],"url":"http://securityreason.com/securityalert/3202"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2007-5262","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"http://aluigi.altervista.org/adv/dropteamz-adv.txt","refsource":"MISC","url":"http://aluigi.altervista.org/adv/dropteamz-adv.txt"},{"name":"dropteam-0x1packet-format-string(36974)","refsource":"XF","url":"https://exchange.xforce.ibmcloud.com/vulnerabilities/36974"},{"name":"20071005 Multiple vulnerabilities in Dropteam 1.3.3","refsource":"BUGTRAQ","url":"http://www.securityfocus.com/archive/1/481616/100/0/threaded"},{"name":"25943","refsource":"BID","url":"http://www.securityfocus.com/bid/25943"},{"name":"27107","refsource":"SECUNIA","url":"http://secunia.com/advisories/27107"},{"name":"3202","refsource":"SREASON","url":"http://securityreason.com/securityalert/3202"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2007-5262","datePublished":"2007-10-08T21:00:00.000Z","dateReserved":"2007-10-08T00:00:00.000Z","dateUpdated":"2024-08-07T15:24:42.367Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2007-10-08 21:17:00","lastModifiedDate":"2026-04-23 00:35:47","problem_types":["CWE-134","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:P/A:P","baseScore":7.5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"PARTIAL","availabilityImpact":"PARTIAL"},"baseSeverity":"HIGH","exploitabilityScore":10,"impactScore":6.4,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":true,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:battlefront:dropteam:*:*:*:*:*:*:*:*","versionEndIncluding":"1.3.3","matchCriteriaId":"0A832AD5-B5F1-477C-B4EE-81C0FBB83458"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2007","CveId":"5262","Ordinal":"1","Title":"CVE-2007-5262","CVE":"CVE-2007-5262","Year":"2007"},"notes":[{"CveYear":"2007","CveId":"5262","Ordinal":"1","NoteData":"Multiple format string vulnerabilities in Battlefront Dropteam 1.3.3 and earlier allow remote attackers to execute arbitrary code via format string specifiers in the (1) username, (2) password, and (3) nickname fields in a \"0x01\" packet.","Type":"Description","Title":"CVE-2007-5262"},{"CveYear":"2007","CveId":"5262","Ordinal":"2","NoteData":"2007-10-08","Type":"Other","Title":"Published"},{"CveYear":"2007","CveId":"5262","Ordinal":"3","NoteData":"2018-10-15","Type":"Other","Title":"Modified"}]}}}