Secunia

Luigi Auriemma has reported a security issue in Crysis, which can be exploited by malicious people to disclose potentially sensitive information.

The problem is that the server/client sends a disconnect packet containing various information (e.g. IP address, nicknames, client status, etc...) when a keyexchange packet is received without an initial join packet.

The security issue is reported in version 1.1.1.6156. Other versions may also be affected.

Solution
Only play multi-player games on trusted, local networks.

Provided and/or discovered by
Luigi Auriemma

Changelog
Further details available in Customer Area

Original Advisory
http://aluigi.altervista.org/adv/crysislog-adv.txt

Deep Links
Links available in Customer Area