Description
Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to cause a denial of service (server crash) via a crafted packet with a 0xc1 value that contains no compressed data, which triggers a copy of a large amount of memory.
References
- 46627 vdb-entry
- http://aluigi.altervista.org/adv/stalker39x-adv.txt
- 20080628 Multiple vulnerabilities in S.T.A.L.K.E.R. 1.0006 mailing-list
- stalker-netcompressor-overflow(43456) vdb-entry
- 29997 vdb-entry
- 30891 third-party-advisory