CVE-2008-6703 Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 pack...
HighCVSS 10.0
EPSS 8.3%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stalker-game s.t.a.l.k.e.r. shadow of chernobyl | <= 1.0006 | No fix listed |
References
- aluigi.altervista.org exploit
- 46626 vdb-entry
- 30891 third-party-advisory vendor-advisory
- 20080628 Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006 mailing-list
- 29997 vdb-entry
- stalker-multipacketreceiver-bo(43454) vdb-entry