CVE-2008-6712

CVE-2008-6712 affects the HTTP/XML-RPC service in Crysis 1.21 and earlier . The vulnerability allows remote attackers to cause a denial of service (crash) by sending a long HTTP request that triggers a NULL pointer dereference . Documents confirm the affected component and the crash-based impact ...

CVE-2008-6737

CVE-2008-6737 affects Crysis 1.21 and earlier. An attacker could trigger a keyexchange packet without a preceding join, causing the game to emit a disconnect packet that reveals unrelated log information and allows disclosure of sensitive player data (real IP addresses). The vulnerability is desc...