Unscored severity · published Aug 19, 2009
CVE-2008-7011
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated…
–
CVSS
2.2%
EPSS
No
On KEV
Description
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.2% · higher than 82% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DM
Dead Mans Hand · Human Head Studios
All versions, or not specified · source: NVD
PA
Pariah · Digital Extreme
All versions, or not specified · source: NVD
PO
Postal · Whiptail Interactive
2 · source: NVD
SO
Shadow Ops · Red Mercury
All versions, or not specified · source: NVD
UT
Unreal Tournament · Epic Games
3; 2003; 2004 · source: NVD
WA
Warpath · Groove Games
All versions, or not specified · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2008-7011
CVE.org
https://www.cve.org/CVERecord?id=CVE-2008-7011
Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html
osvdb.org
http://osvdb.org/48293
www.securityfocus.com
http://www.securityfocus.com/archive/1/496399/100/0/threaded
Exploit
http://www.securityfocus.com/bid/31205