CVE-2007-4638
UnknownEPSS 6.18%
Last modified
CVE-2007-4638 is a vulnerability of currently unknown severity. Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.. EPSS estimates a 6.18% chance of exploitation in the next 30 days.
Description
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Blizzard Entertainment | Starcraft Brood War | <= 1.15.1 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2007-4638?
Blizzard Entertainment StarCraft Brood War 1.15.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed map, which triggers an out-of-bounds read during a minimap preview.
How severe is CVE-2007-4638?
Severity scoring for CVE-2007-4638 is pending analysis. The EPSS model estimates a 6.18% probability of exploitation in the next 30 days.
How do I fix CVE-2007-4638?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2007
- CVE-2007-4632Cisco IOS 12.2E, 12.2F, and 12.2S places a "no login" line i…
- CVE-2007-4633Multiple cross-site scripting (XSS) vulnerabilities in Cisco…
- CVE-2007-4634Multiple SQL injection vulnerabilities in Cisco CallManager …
- CVE-2007-4635Yahoo! Messenger 8.1.0.209 and 8.1.0.402 allows remote attac…
- CVE-2007-4636Multiple PHP remote file inclusion vulnerabilities in phpBG …
- CVE-2007-4637xGB.php in xGB 2.0 does not require authentication for an ad…
- CVE-2007-4639EnterpriseDB Advanced Server 8.2 does not properly handle ce…
- CVE-2007-4640Unrestricted file upload vulnerability in index.php in Pakup…
- CVE-2007-4641Directory traversal vulnerability in index.php in Pakupaku C…
- CVE-2007-4642Multiple buffer overflows in Doomsday (aka deng) 1.9.0-beta5…
- CVE-2007-4643Integer underflow in Doomsday (aka deng) 1.9.0-beta5.1 and e…
- CVE-2007-4644Format string vulnerability in the Cl_GetPackets function in…
Are you affected by CVE-2007-4638?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST