• info
• discussion
• exploit
• solution
• references

Crysis Username Format String Vulnerability

Crysis is prone to a format-string vulnerability.

Exploiting this issue will allow attackers to execute arbitrary code with the permissions of a user running the application. Failed attacks will likely cause denial-of-service conditions.

Crysis 1.1.1.5879 is vulnerable to this issue; other versions may also be affected.