CVE-2008-6703

Stalker-game S.t.a.l.k.e.r. < 1.0006 - Memory Corruption

Title source: rule
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2008-6703. PoCs published by Luigi Auriemma.

AI-analyzed exploit summary The provided text describes multiple vulnerabilities in S.T.A.L.K.E.R Shadow of Chernobyl 1.0006, including stack-based buffer overflow, integer overflow, and DoS. However, no actual exploit code is present in the snippet.

Description

Stack-based buffer overflow in the IPureServer::_Recieve function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 and earlier allows remote attackers to execute arbitrary code via a compressed 0x39 packet, which is decompressed by the NET_Compressor::Decompress function.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Luigi Auriemma · textdosmultiple
https://www.exploit-db.com/exploits/31998

The provided text describes multiple vulnerabilities in S.T.A.L.K.E.R Shadow of Chernobyl 1.0006, including stack-based buffer overflow, integer overflow, and DoS. However, no actual exploit code is present in the snippet.

Classification
Writeup 90%
Attack Type
Rce | Dos
Complexity
Theoretical
Reliability
Theoretical
Target: S.T.A.L.K.E.R Shadow of Chernobyl 1.0006
No auth needed
Prerequisites: Network access to the target application
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/493765
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/43454
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/29997
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://osvdb.org/46626
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/30891

Scores

EPSS 0.2849
EPSS Percentile 96.6%

Details

CWE
CWE-119
Status published
Products (1)
stalker-game/s.t.a.l.k.e.r.\ < 1.0006
Published Apr 10, 2009
Tracked Since Feb 18, 2026