CVE-2008-6737

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.

Link	Resource
http://secunia.com/advisories/30706	Vendor Advisory
http://osvdb.org/46260
http://www.securityfocus.com/bid/29720	Exploit
http://aluigi.altervista.org/adv/crysislog-adv.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/43087

Configuration 1

cpe:2.3:a:ea:crysis:1.1:*:*:*:*:*:*:* cpe:2.3:a:ea:crysis:*:*:*:*:*:*:*:* cpe:2.3:a:ea:crysis:1.2:*:*:*:*:*:*:*

---

Published : 2009-04-21 06:30

Updated : 2017-08-17 01:29

---

NVD link : CVE-2008-6737

Mitre link : CVE-2008-6737

Crysis

Ea

CWE-200