CVE-2008-1127 | BDVDB-2026-29515 Detail

Description#

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://secunia.com/advisories/29155
http://www.vupen.com/english/advisories/2008/0735
https://www.exploit-db.com/exploits/5201
http://www.securityfocus.com/bid/28039

Exploit#

https://www.exploit-db.com/exploits/5201

History#

Version 12008-03-03Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.