CVE-2008-6712 The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer derefe...
MediumCVSS 5.0
EPSS 7.4%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ea crysis | <= 1.21 | No fix listed |
| ea crysis | = 1.1 | No fix listed |
| ea crysis | = 1.2 | No fix listed |
References
- aluigi.org exploit
- 20080618 NULL pointer in the HTTP/XML-RPC service of Crysis 1.21 exploit mailing-list
- 46261 vdb-entry
- 30675 third-party-advisory vendor-advisory
- 20080616 NULL pointer in the HTTP/XML-RPC service of Crysis 1.21 mailing-list
- 29759 exploit vdb-entry
- crysis-httpxmlrpc-dos(43126) vdb-entry