CVE-2009-3924: Punkbuster

High severity, CVSS 9.3. EPSS: 4% chance of exploitation in the next 30 days.

Buffer overflow in pbsv.dll, as used in Soldier of Fortune II and possibly other applications when Even Balance PunkBuster 1.728 or earlier is enabled, allows remote attackers to cause a denial of service (application server crash) and possibly execute arbitrary code via a long restart packet.

Affected products

• Punkbuster Punkbuster: up to and including 1.728; version 1.272 only; version 1.457 only; version 1.458 only; version 1.641 only; version 1.642 only; …
• Raven Software Soldier Of Fortune 2: any version

Published 2009-11-10. Last modified 2026-06-16.