critical10.0Public exploit code
CVE-2008-6703
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- S.T.A.L.K.E.R Shadow of Chernobyl 1.0006 - Multiple Remote Vulnerabilities2008-06-28 · dos · multiple · Verified
Impact
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Stalker-Game | S.T.A.L.K.E.R.\ | through 1.0006 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/stalker39x-adv.txt
- http://osvdb.org/46626
- http://secunia.com/advisories/30891
- http://www.securityfocus.com/archive/1/493765
- http://www.securityfocus.com/bid/29997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43454
- http://aluigi.altervista.org/adv/stalker39x-adv.txt
- http://osvdb.org/46626
- http://secunia.com/advisories/30891
- http://www.securityfocus.com/archive/1/493765
- http://www.securityfocus.com/bid/29997
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43454