high7.8Public exploit code
CVE-2008-6737
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a prev…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Crysis 1.21 - 'keyexchange' Packet Information Disclosure2008-06-15 · remote · multiple · Verified
Impact
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ea | Crysis | through 1.21 Versions 1.1, 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/crysislog-adv.txt
- http://osvdb.org/46260
- http://secunia.com/advisories/30706
- http://www.securityfocus.com/bid/29720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43087
- http://aluigi.altervista.org/adv/crysislog-adv.txt
- http://osvdb.org/46260
- http://secunia.com/advisories/30706
- http://www.securityfocus.com/bid/29720
- https://exchange.xforce.ibmcloud.com/vulnerabilities/43087