CVE-2008-6712: Null Pointer Dereference
Published Apr 10, 2009
·Updated
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
Affected Software
3 affected components
ea Crysis=1.1
ea Crysis<=1.21
ea Crysis=1.2
Event History
Apr 10, 2009
CVE Published
via MITRE·03:00 PM
Data Sourced
via MITRE·03:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2008-6712?
CVE-2008-6712 is classified as a denial of service vulnerability, which can lead to the crashing of the Crysis game.
2
How do I fix CVE-2008-6712?
To mitigate CVE-2008-6712, it is recommended to upgrade to Crysis version 1.21 or later.
3
What causes the CVE-2008-6712 vulnerability?
CVE-2008-6712 is caused by a NULL pointer dereference triggered by a long HTTP request to the HTTP/XML-RPC service.
4
Which versions of Crysis are affected by CVE-2008-6712?
CVE-2008-6712 affects Crysis versions up to 1.21 and includes game version 1.1.1.6156 and earlier.
5
Can CVE-2008-6712 be exploited remotely?
Yes, CVE-2008-6712 can be exploited remotely by attackers sending specially crafted HTTP requests to the vulnerable service.