PT-2008-2723 · Ea Games · Crysis

Long Poke · Publicado 2008-03-03 · Atualizado 2017-09-29 · CVE-2008-1127

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Crysis version 1.1.1.5879

Description The issue allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed. This occurs due to a format string vulnerability in the cryactio function.

Recommendations For Crysis version 1.1.1.5879, as a temporary workaround, consider restricting the use of format string specifiers in the user name to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Externally-Controlled Format String

Enumeração de Fraquezas

CWE-134

Identificadores relacionados

CVE-2008-1127

Produtos afetados

Crysis

Referências · 5

• 🔥 https://exploit-db.com/exploits/5201 · Exploit
• http://securityfocus.com/bid/28039 · Nota
• http://secunia.com/advisories/29155 · Nota
• http://vupen.com/english/advisories/2008/0735 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1127 · Nota de Segurança