Vulnerabilities

TI-2008-06426 CVE-2008-6737 · GHSA-4px6-cjq3-8frv

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information…

LOW 39

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect pa…

CVSS 2.0HIGH 7.8 Network No auth Interaction — EPSS 0.02665 Published 2009-04-21 No fix listed CWE-200

TI-2008-06401 CVE-2008-6712 · GHSA-w9p3-9v5m-q2g3

The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows…

LOW 33

The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.07396 Published 2009-04-10 No fix listed

Vulnerabilities

Filters

Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information…

The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows…