Information disclosure

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information...

CVE-2008-6737

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information...

CVE-2008-6737

CVE-2008-6737 affects Crysis 1.21 and earlier. An attacker could trigger a keyexchange packet without a preceding join, causing the game to emit a disconnect packet that reveals unrelated log information and allows disclosure of sensitive player data (real IP addresses). The vulnerability is desc...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

Null pointer dereference

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

The HTTP/XML-RPC service in Crysis 1.21 game version 1.1.1.6156 and earlier allows remote attackers to cause a denial of service crash via a long HTTP request, which triggers a NULL pointer dereference...

CVE-2008-6712

CVE-2008-6712 affects the HTTP/XML-RPC service in Crysis 1.21 and earlier . The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP request that triggers a NULL pointer dereference . Documents confirm the affected component and the crash-based impact ...

Crysis keyexchange报文信息泄露漏洞

BUGTRAQ ID: 29720 Crysis是由Crytek开发的第一人称射击游戏。 Crysis在处理畸形格式的用户请求时存在漏洞，如果远程用户未经首先发送加入游戏报文（0x07）便向Crysis服务器发送了 keyexchange报文（0x8c）的话，服务器就会响应包含有KeyExchange1 with no connection错误消息的disconnect报文（0x08），之后为16行的内部日志，日志中包含有各种实时信息，如IP地址、昵称、客户端状态等敏感信息。 Electronic Arts Crysis = 1.21 Electronic Arts...

NULL pointer in the HTTP/XML-RPC service of Crysis 1.21

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Crysis games server DoS

NULL pointer dereference on oversized request to HTTP/XML-RPC interface...

dontcrysis-adv.txt

Luigi Auriemma Application: Crysis http://www.ea.com/crysis/home.jsp Versions: = 1.21 1.1.1.6156 showed as gamever Platforms: Windows Bug: NULL pointer in the HTTP/XML-RPC service Exploitation: remote, versus server Date: 16 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web:...

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service

Crysis 1.21 - HTTPXML-RPC Service Remote Denial of Service source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected...

Crysis 1.21 - HTTP/XML-RPC Service Remote Denial of Service

source: https://www.securityfocus.com/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions. An attacker can exploit this issue to crash the affected application, denying further service to legitimate users. Crysi...

Crysis 1.21 - keyexchange Packet Information Disclosure

Crysis 1.21 - keyexchange Packet Information Disclosure source: https://www.securityfocus.com/bid/29720/info Crysis is prone to an information-disclosure vulnerability caused by a design error. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Crys...

Crysis 1.21 - 'keyexchange' Packet Information Disclosure

source: https://www.securityfocus.com/bid/29720/info Crysis is prone to an information-disclosure vulnerability caused by a design error. Attackers can exploit this issue to obtain sensitive information that may lead to further attacks. Crysis 1.21 and prior versions are affected...

Format string

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed...

CVE-2008-1127

CVE-2008-1127 affects the game Crysis (Crysis 1.1.1.5879) in the cryactio function. The vulnerability is a format string flaw in the user name field that can be triggered when the game character is killed, allowing remote authenticated users to execute arbitrary code. Affected component: cryactio...

Crysis <= 1.1.1.5879 Remote Format String Denial of Service PoC

No description provided by source. The Crysis engine passes along internal debug strings through the game. One of them is passed to vsprintf in the crt lib: 30503263 8D8C24 10100000 LEA ECX,DWORD PTR SS:ESP+1010 3050326A 51 PUSH ECX 3050326B 50 PUSH EAX 3050326C 8D5424 08 LEA EDX,DWORD PTR SS:ESP...

crysis-format.txt

The Crysis engine passes along internal debug strings through the game. One of them is passed to vsprintf in the crt lib: 30503263 8D8C24 10100000 LEA ECX,DWORD PTR SS:ESP+1010 3050326A 51 PUSH ECX 3050326B 50 PUSH EAX 3050326C 8D5424 08 LEA EDX,DWORD PTR SS:ESP+8 30503270 52 PUSH EDX 30503271 FF...

Crysis <= 1.1.1.5879 Remote Format String Denial of Service PoC

Exploit for unknown platform in category dos / poc =============================================================== Crysis ; MSVCR80.vsprintf 0032CAD8 30503277 w2P0 /CALL to vsprintf from cryactio.30503271 0032CADC 0032CAE8 eE2. |buffer = 0032CAE8 0032CAE0 0032DAF8 oU2. |format = "Pathfinding in...