CVE-2008-6737

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information...

CVE-2008-6737

CVE-2008-6737 affects Crysis 1.21 and earlier. An attacker could trigger a keyexchange packet without a preceding join, causing the game to emit a disconnect packet that reveals unrelated log information and allows disclosure of sensitive player data (real IP addresses). The vulnerability is desc...

CVE-2008-6737

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information...

CVE-2008-6737: Exposure of Sensitive Information to an Unauthorized Actor

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information...

Null pointer dereference

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

CVE-2008-6712 affects the HTTP/XML-RPC service in Crysis 1.21 and earlier . The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP request that triggers a NULL pointer dereference . Documents confirm the affected component and the crash-based impact ...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712: Undefined Security Weakness

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

Crysis keyexchange报文信息泄露漏洞

BUGTRAQ ID: 29720 Crysis是由Crytek开发的第一人称射击游戏。 Crysis在处理畸形格式的用户请求时存在漏洞，如果远程用户未经首先发送加入游戏报文（0x07）便向Crysis服务器发送了 keyexchange报文（0x8c）的话，服务器就会响应包含有KeyExchange1 with no connection错误消息的disconnect报文（0x08），之后为16行的内部日志，日志中包含有各种实时信息，如IP地址、昵称、客户端状态等敏感信息。 Electronic Arts Crysis = 1.21 Electronic Arts...

dontcrysis-adv.txt

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Crysis games server DoS

NULL pointer dereference on oversized request to HTTP/XML-RPC interface...

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected...

Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service

source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate users. Crysi...

Crysis 1.21 - keyexchange Packet Information Disclosure

Crysis 1.21 - keyexchange Packet Information Disclosure source: https://www.securityfocus.com/bid/29720/info Crysis is prone to an information-disclosure vulnerability caused by a design error. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Crys...

Crysis 1.21 - 'keyexchange' Packet Information Disclosure

source: https://www.securityfocus.com/bid/29720/info Crysis is prone to an information-disclosure vulnerability caused by a design error. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Crysis 1.21 and prior versions are affected...

Format string

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed...

CVE-2008-1127

CVE-2008-1127 affects the game Crysis (Crysis 1.1.1.5879) in the cryactio function. The vulnerability is a format string flaw in the user name field that can be triggered when the game character is killed, allowing remote authenticated users to execute arbitrary code. Affected component: cryactio...

CVE-2008-1127: Use of Externally-Controlled Format String

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed...