CVE-2008-6703

Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.

Score

CVSS 2.0 10.0 Critical

Status

Modified - cve@mitre.org

Published

2009-04-10

Last modified

2024-08-07

Weaknesses

CWE-119

Affected products

• S.t.a.l.k.e.r.\ (Stalker-game)

References

• http://aluigi.altervista.org/adv/stalker39x-adv.txt
• http://osvdb.org/46626
• http://secunia.com/advisories/30891
• http://www.securityfocus.com/archive/1/493765
• http://www.securityfocus.com/bid/29997
• https://exchange.xforce.ibmcloud.com/vulnerabilities/43454