S.T.A.L.K.E.R. Clear Sky Remote Denial of Service Vulnerability

Bugtraq ID:	35762
Class:	Failure to Handle Exceptional Conditions
CVE:
Remote:	Yes
Local:	No
Published:	Jul 22 2009 12:00AM
Updated:	Jul 23 2009 08:46PM
Credit:	Luigi Auriemma
Vulnerable:	GSC Game World S.T.A.L.K.E.R. Clear Sky 1.0010
Not Vulnerable:

S.T.A.L.K.E.R. Clear Sky Remote Denial of Service Vulnerability

S.T.A.L.K.E.R. Clear Sky is prone to a remote denial-of-service vulnerability because the software fails to handle exceptional conditions when processing user nicknames.

Successfully exploiting this issue allows remote attackers to crash the affected application, denying service to legitimate users.

The issue affects S.T.A.L.K.E.R. Clear Sky 1.5.10 (1.0010) and prior versions.

NOTE: This issue may be related to the issue described in BID 29723 (S.T.A.L.K.E.R. Remote Denial of Service Vulnerability). We will update this BID if more information emerges.

S.T.A.L.K.E.R. Clear Sky Remote Denial of Service Vulnerability

The following exploit is available:

• /data/vulnerabilities/exploits/35762_dirtysky.zip

S.T.A.L.K.E.R. Clear Sky Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

S.T.A.L.K.E.R. Clear Sky Remote Denial of Service Vulnerability

References:

• STALKER Game World homepage (GSC Game World)
  
• S.T.A.L.K.E.R.: Clear Sky unhandled strcpy_s exception (Luigi Auriemma)