CVE-2007-4508

Severity: medium (CVSS 6.8 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 6.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-08-23 · updated 2026-06-16

Description

Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.

Affected products

Rebellion Rogue Trooper: through 1.0
Rival Interactive Prism: through 1.1.1.0

References

http://aluigi.altervista.org/adv/asurabof-adv.txt
http://osvdb.org/39799
http://secunia.com/advisories/24023
http://secunia.com/advisories/26571
http://securityreason.com/securityalert/3053
http://www.securityfocus.com/archive/1/477357/100/0/threaded
http://www.securityfocus.com/bid/25411
http://www.vupen.com/english/advisories/2007/2955
http://www.vupen.com/english/advisories/2007/2956
https://exchange.xforce.ibmcloud.com/vulnerabilities/36221
http://aluigi.altervista.org/adv/asurabof-adv.txt
http://osvdb.org/39799

Get alerted when CVE-2007-4508 or the next vulnerability affects your stack