Total
4 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2008-6703 | 1 Stalker-game | 1 S.t.a.l.k.e.r.\ | 2024-02-04 | 10.0 HIGH | N/A |
Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function. | |||||
CVE-2008-6702 | 1 Stalker-game | 1 S.t.a.l.k.e.r.\ | 2024-02-04 | 5.0 MEDIUM | N/A |
S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (crash) via a long nickname, which triggers an exception. | |||||
CVE-2008-6704 | 1 Stalker-game | 1 S.t.a.l.k.e.r.\ | 2024-02-04 | 5.0 MEDIUM | N/A |
Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory. | |||||
CVE-2008-6705 | 1 Stalker-game | 1 S.t.a.l.k.e.r.\ | 2024-02-04 | 5.0 MEDIUM | N/A |
The MultipacketReciever::RecievePacket function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server termination) via a crafted packet without an expected 0xe0 or 0xe1 value, which triggers the INT3 instruction. |