Unrated severityNVD Advisory· Published Oct 6, 2007· Updated Apr 23, 2026

CVE-2007-5250

Description

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster (PB) is enabled, allows remote attackers to cause a denial of service (server hang) via packets containing 0x07 characters or other unspecified invalid characters. NOTE: this issue may overlap CVE-2007-4443. NOTE: this issue might be in Punkbuster itself, but there are insufficient details to be certain.

Affected products

Americasarmy/America\'s Army
cpe:2.3:a:americasarmy:america\'s_army:*:*:*:*:*:*:*:*
Range: <=2.8.2
Americasarmy/America\'s Army Special Forces
cpe:2.3:a:americasarmy:america\'s_army_special_forces:*:*:*:*:*:*:*:*
Range: <=2.8.2

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

aluigi.altervista.org/adv/aaboompb-adv.txtnvdExploit
aluigi.org/poc/aaboompb.zipnvdExploit
secunia.com/advisories/27015nvd
securityreason.com/securityalert/3193nvd
www.securityfocus.com/archive/1/481227/100/0/threadednvd
exchange.xforce.ibmcloud.com/vulnerabilities/36898nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000