CVE-2008-6704 Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted....
MediumCVSS 5.0
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| stalker-game s.t.a.l.k.e.r. shadow of chernobyl | <= 1.0006 | No fix listed |
References
- aluigi.altervista.org
- 46627 vdb-entry
- 30891 third-party-advisory vendor-advisory
- 20080628 Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006 mailing-list
- 29997 vdb-entry
- stalker-netcompressor-overflow(43456) vdb-entry