CVE-2008-6737 Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to....
HighCVSS 7.8
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ea crysis | <= 1.21 | No fix listed |
| ea crysis | = 1.1 | No fix listed |
| ea crysis | = 1.2 | No fix listed |
References
- aluigi.altervista.org
- 46260 vdb-entry
- 30706 third-party-advisory vendor-advisory
- 29720 exploit vdb-entry
- crysis-keyexchange-info-disclosure(43087) vdb-entry