Published: 10/04/2009 Updated: 11/10/2018

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:N/A:P

The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and previous versions allows remote malicious users to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ea crysis 1.1
ea crysis 1.2
ea crysis

source: wwwsecurityfocuscom/bid/29759/info Crysis is prone to a remote denial-of-service vulnerability because the application fails to handle exceptional conditions An attacker can exploit this issue to crash the affected application, denying further service to legitimate users Crysis 121 is vulnerable; other versions may also be af ...

NVD-CWE-Other http://aluigi.org/poc/dontcrysis.txt http://www.securityfocus.com/bid/29759 http://secunia.com/advisories/30675 http://osvdb.org/46261 http://archives.neohapsis.com/archives/fulldisclosure/2008-06/0211.html https://exchange.xforce.ibmcloud.com/vulnerabilities/43126 http://www.securityfocus.com/archive/1/493385/100/0/threaded https://nvd.nist.gov https://www.exploit-db.com/exploits/31931/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2008-6712

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect