CVE-2008-3410: Input Validation

Q: What is the severity of CVE-2008-3410?

CVE-2008-3410 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.

Q: What software versions are affected by CVE-2008-3410?

CVE-2008-3410 affects Unreal Tournament 3 versions 1.1 through 1.3beta4.

Q: How can I exploit CVE-2008-3410?

CVE-2008-3410 can be exploited by sending a specially crafted UDP packet that causes a NULL pointer dereference.

Q: How do I fix CVE-2008-3410?

To mitigate CVE-2008-3410, update to a patched version of Unreal Tournament 3 if available.

Q: What impact does CVE-2008-3410 have on my system?

CVE-2008-3410 can lead to crashes of the Unreal Tournament 3 daemon, resulting in a denial of service.

Published Jul 31, 2008

Updated

Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c.

Affected Software

3 affected components

Epic Games Unreal Tournament 3=1.1

Epic Games Unreal Tournament 3<=1.3

Epic Games Unreal Tournament 3=1.2

Event History

Jul 31, 2008

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2008-3410?

CVE-2008-3410 is classified as a moderate severity vulnerability due to its potential to cause a denial of service.

What software versions are affected by CVE-2008-3410?

CVE-2008-3410 affects Unreal Tournament 3 versions 1.1 through 1.3beta4.

How can I exploit CVE-2008-3410?

CVE-2008-3410 can be exploited by sending a specially crafted UDP packet that causes a NULL pointer dereference.

How do I fix CVE-2008-3410?

To mitigate CVE-2008-3410, update to a patched version of Unreal Tournament 3 if available.

What impact does CVE-2008-3410 have on my system?