Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)

Crysis 1.1.1.5879 - Remote Format String Denial of Service PoC The Crysis engine passes along internal debug strings through the game. One of them is passed to vsprintf in the crt lib: 30503263 8D8C24 10100000 LEA ECX,DWORD PTR SS:ESP+1010 3050326A 51 PUSH ECX 3050326B 50 PUSH EAX 3050326C 8D5424...

Crysis 1.1.1.5879 - Remote Format String Denial of Service (PoC)

The Crysis engine passes along internal debug strings through the game. One of them is passed to vsprintf in the crt lib: 30503263 8D8C24 10100000 LEA ECX,DWORD PTR SS:ESP+1010 3050326A 51 PUSH ECX 3050326B 50 PUSH EAX 3050326C 8D5424 08 LEA EDX,DWORD PTR SS:ESP+8 30503270 52 PUSH EDX 30503271 FF...

Fixed XSS vulnerability at www.crysis.com

Security researcher Xylitol, has submitted on 14/02/2008 a cross-site-scripting XSS vulnerability affecting www.crysis.com, which at the time of submission ranked 374102 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/03/2008. It is currentl...