VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 3, 2008· Updated Jun 16, 2026

CVE-2008-1127

CVE-2008-1127

Description

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Ea/Crysis2 versions
    cpe:2.3:a:crytek:crysis:1.1.1.5879:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:crytek:crysis:1.1.1.5879:*:*:*:*:*:*:*
    • (no CPE)range: = 1.1.1.5879

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.