CVE-2008-1127

Severity: medium (CVSS 6.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.0% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2008-03-03 · updated 2026-06-16
Weakness: CWE-134

Description

Format string vulnerability in the cryactio function in Crysis 1.1.1.5879 allows remote authenticated users to execute arbitrary code via format string specifiers in the user name, which is triggered when the game character is killed.

Affected products

Crytek Crysis: 1.1.1.5879

References

http://secunia.com/advisories/29155
http://www.securityfocus.com/bid/28039
http://www.vupen.com/english/advisories/2008/0735
https://www.exploit-db.com/exploits/5201
http://secunia.com/advisories/29155
http://www.securityfocus.com/bid/28039
http://www.vupen.com/english/advisories/2008/0735
https://www.exploit-db.com/exploits/5201

Get alerted when CVE-2008-1127 or the next vulnerability affects your stack