CVE-2008-6704

Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory.
Configurations

Configuration 1 (hide)

cpe:2.3:a:stalker-game:s.t.a.l.k.e.r.\:_shadow_of_chernobyl:*:*:*:*:*:*:*:*

History

No history.

Information

Published : 2009-04-10 22:00

Updated : 2024-02-04 17:33


NVD link : CVE-2008-6704

Mitre link : CVE-2008-6704

CVE.ORG link : CVE-2008-6704


JSON object : View

Products Affected

stalker-game

  • s.t.a.l.k.e.r.\
CWE
CWE-189

Numeric Errors