CVE-2008-6703

CRITICAL 10.0CVE-2008-6703 · Published 10/04/2009 · updated 16/06/2026

In short

CVE-2008-6703 is a CRITICAL (CVSS 10.0) vulnerability affecting s.t.a.l.k.e.r. (stalker-game).
Chance of exploitation in the next 30 days (EPSS): 8.3%, higher than 94.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
s.t.a.l.k.e.r. stalker-game	`≤ 1.0006`	No fix yet

Description

Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.

References

aluigi.altervista.org/adv/stalker39x-adv.txt · Exploit
osvdb.org/46626
secunia.com/advisories/30891 · Vendor Advisory
securityfocus.com/archive/1/493765
securityfocus.com/bid/29997
exchange.xforce.ibmcloud.com/vulnerabilities/43454

More vulnerabilities in s.t.a.l.k.e.r.

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free