National Cyber-Alert System

Vulnerability Summary for CVE-2008-6703

Overview

Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: XF

Name: stalker-multipacketreceiver-bo(43454)

Hyperlink:http://xforce.iss.net/xforce/xfdb/43454

External Source: BID

Name: 29997

Hyperlink:http://www.securityfocus.com/bid/29997

External Source: BUGTRAQ

Name: 20080628 Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006

Hyperlink:http://www.securityfocus.com/archive/1/493765

External Source: SECUNIA

Name: 30891

Type: Advisory

Hyperlink:http://secunia.com/advisories/30891

External Source: OSVDB

Name: 46626

Hyperlink:http://osvdb.org/46626

External Source: MISC

Name: http://aluigi.altervista.org/adv/stalker39x-adv.txt

Hyperlink:http://aluigi.altervista.org/adv/stalker39x-adv.txt