CVE-2008-6704: Integer overflow in the NET_Compressor::Decompress function in S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 a...

Security readout for executives and security teams

This is a remote denial-of-service flaw in legacy S.T.A.L.K.E.R.: Shadow of Chernobyl game server code. A malformed network packet can crash an affected server. It does not indicate data theft or code execution in the provided sources, but any exposed server could be disrupted. Exposure is likely limited to organizations or communities still running S.T.A.L.K.E.R.: Shadow of Chernobyl 1.0006 or earlier multiplayer servers, especially if reachable from the internet. Low for most enterprises, but moderate where affected public game servers are still operated. Treat as an availability risk, not a confirmed data compromise risk. Mitigation focus: Identify any S.T.A.L.K.E.R.: Shadow of Chernobyl servers and confirm versions.; Check vendor or maintainer guidance for supported updates or replacement builds.; Restrict internet exposure to trusted players or private networks where possible..

Prepared

Jun 28, 2026, 11:04 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.