{
    "id": "CVE-2007-4508",
    "published": "2007-08-23 19:17:00",
    "last_modified": "2026-06-16 22:44:13",
    "cvss_score": "6.8",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
    "cwe": null,
    "description": "Stack-based buffer overflow in Rebellion Asura engine, as used for the server in Rogue Trooper 1.0 and earlier and Prism 1.1.1.0 and earlier, allows remote attackers to execute arbitrary code via a long string in a 0xf007 packet for the challenge B query.",
    "epss_score": "0.06018",
    "epss_percentile": "0.93110",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-30 18:17:06",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "rebellion",
            "product": "rogue_trooper"
        },
        {
            "vendor": "rival_interactive",
            "product": "prism"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "30519",
            "title": "Asura Engine Challenge B Query - Remote Stack Buffer Overflow",
            "date": "2007-08-22",
            "url": "https://www.exploit-db.com/exploits/30519"
        }
    ],
    "refs_list": [
        "http://aluigi.altervista.org/adv/asurabof-adv.txt",
        "http://osvdb.org/39799",
        "http://secunia.com/advisories/24023",
        "http://secunia.com/advisories/26571",
        "http://securityreason.com/securityalert/3053",
        "http://www.securityfocus.com/archive/1/477357/100/0/threaded",
        "http://www.securityfocus.com/bid/25411",
        "http://www.vupen.com/english/advisories/2007/2955",
        "http://www.vupen.com/english/advisories/2007/2956",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/36221",
        "http://aluigi.altervista.org/adv/asurabof-adv.txt",
        "http://osvdb.org/39799",
        "http://secunia.com/advisories/24023",
        "http://secunia.com/advisories/26571",
        "http://securityreason.com/securityalert/3053",
        "http://www.securityfocus.com/archive/1/477357/100/0/threaded",
        "http://www.securityfocus.com/bid/25411",
        "http://www.vupen.com/english/advisories/2007/2955",
        "http://www.vupen.com/english/advisories/2007/2956",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/36221"
    ]
}