Integer overflow

Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...

CVE-2008-6702

S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...

CVE-2008-6704

Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...

CVE-2008-6705

The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...

CVE-2008-6704

The CVE-2008-6704 entry concerns an integer overflow in the NET_Compressor::Decompress function of S.T.A.L.K.E.R.: Shadow of Chernobyl (versions 1.0006 and earlier). A remote attacker can trigger a denial of service (server crash) by sending a crafted packet with a 0xC1 value that contains no com...

CVE-2008-6702

S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...

CVE-2008-6704

Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...

CVE-2008-6705

The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...

CVE-2008-6702: Improper Input Validation

S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service crash via a long nickname, which triggers an exception...

CVE-2008-6703: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in the IPureServer::Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NETCompressor::Decompress function...

CVE-2008-6704: Undefined Security Weakness

Integer overflow in the NETCompressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server crash via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount o...

CVE-2008-6705: Undefined Security Weakness

The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service server termination via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction...

Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bugs: A IPureServer::Recieve buffer-overflow B NETCompressor::Decompress integer overflow C MultipacketReciever::RecievePacket INT3 Exploitation: remote, versus server...

S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities

source: https://www.securityfocus.com/bid/29997/info S.T.A.L.K.E.R is prone to multiple remote vulnerabilities: - A stack-based buffer-overflow vulnerability - An integer-overflow vulnerability - A denial-of-service vulnerability An attacker can exploit these issues to execute arbitrary code with...

Denial of Service in S.T.A.L.K.E.R. 1.0006

Luigi Auriemma Application: S.T.A.L.K.E.R.: Shadow of Chernobyl http://www.stalker-game.com Versions: = 1.0006 Platforms: Windows Bug: Denial of Service Exploitation: remote Date: 15 Jun 2008 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...