Filtered by vendor Ea Subscriptions
Filtered by product Crysis Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-6712 1 Ea 1 Crysis 2024-08-07 N/A
The HTTP/XML-RPC service in Crysis 1.21 (game version 1.1.1.6156) and earlier allows remote attackers to cause a denial of service (crash) via a long HTTP request, which triggers a NULL pointer dereference.
CVE-2008-6737 1 Ea 1 Crysis 2024-08-07 N/A
Crysis 1.21 and earlier allows remote attackers to obtain sensitive player information such as real IP addresses by sending a keyexchange packet without a previous join packet, which causes Crysis to send a disconnect packet that includes unrelated log information.