CVE-2008-3396

Published: Jul 31, 2008Modified: Apr 23, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.

Affected (3)

Products: Epic Games: Unreal Tournament 2004

Epic Games

1 product

Unreal Tournament 2004

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Epic Games Unreal Tournament 2004	Up to 3369
Epic Games Unreal Tournament 2004	Version 3120
Epic Games Unreal Tournament 2004	Version 3334

Related CWEs

CWE-20

Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (14)

http://aluigi.altervista.org/adv/ut2004null-adv.txt

Source: cve@mitre.org

http://aluigi.org/poc/ut2004null.zip

Source: cve@mitre.org

http://secunia.com/advisories/31266

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/archive/1/494935/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/30427

Source: cve@mitre.org

http://www.vupen.com/english/advisories/2008/2259/references

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/44107

Source: cve@mitre.org

http://aluigi.altervista.org/adv/ut2004null-adv.txt