CVE-2008-3396: Input Validation
First published: Thu Jul 31 2008(Updated: )
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Unreal Tournament | =3334 | |
| Unreal Tournament | <=3369 | |
| Unreal Tournament | =3120 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://aluigi.altervista.org/adv/ut2004null-adv.txt
- http://aluigi.org/poc/ut2004null.zip
- http://www.securityfocus.com/bid/30427
- http://secunia.com/advisories/31266
- http://www.vupen.com/english/advisories/2008/2259/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44107
- http://www.securityfocus.com/archive/1/494935/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-3396?
CVE-2008-3396 is considered a high-severity vulnerability due to its potential to cause denial of service.
How do I fix CVE-2008-3396?
To mitigate CVE-2008-3396, upgrade to Unreal Tournament 2004 version 3369 or later, or apply any available patches.
What types of attacks are possible with CVE-2008-3396?
CVE-2008-3396 allows remote attackers to disrupt service by exploiting a NULL pointer dereference vulnerability.
Which versions of Unreal Tournament 2004 are affected by CVE-2008-3396?
CVE-2008-3396 affects Unreal Tournament 2004 versions up to and including 3369, as well as version 3120.
Can CVE-2008-3396 be exploited remotely?
Yes, CVE-2008-3396 can be exploited remotely through the sending of malformed packets.
- agent/weakness
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/references
- agent/last-modified-date
- agent/author
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/epic games
- canonical/unreal tournament
- version/unreal tournament/3334
- version/unreal tournament/3369
- version/unreal tournament/3120