PT-2008-2723 · Ea Games · Crysis

Long Poke · Published 2008-03-03 · Updated 2017-09-29 · CVE-2008-1127

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Medium

Base vector

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Crysis version 1.1.1.5879

Description The issue allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed. This occurs due to a format string vulnerability in the cryactio function.

Recommendations For Crysis version 1.1.1.5879, as a temporary workaround, consider restricting the use of format string specifiers in the user name to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Use of Externally-Controlled Format String

Weakness Enumeration

CWE-134

Related Identifiers

CVE-2008-1127

Affected Products

Crysis

References · 5

• 🔥 https://exploit-db.com/exploits/5201 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2008-1127 · Security Note
• http://securityfocus.com/bid/28039 · Note
• http://secunia.com/advisories/29155 · Note
• http://vupen.com/english/advisories/2008/0735 · Note