high7.5Public exploit code
CVE-2008-3409
Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possib…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Unreal Tournament 3 - Memory Corruption (Denial of Service)2008-07-30 · dos · multiple · Verified
Impact
Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka attack 1 in ut3mendo.c.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Epic Games | Unreal Tournament 3 | through 1.3 Versions 1.1, 1.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://aluigi.altervista.org/adv/ut3mendo-adv.txt
- http://aluigi.org/poc/ut3mendo.zip
- http://secunia.com/advisories/31265
- http://www.securityfocus.com/archive/1/494929/100/0/threaded
- http://www.securityfocus.com/bid/30430
- http://www.vupen.com/english/advisories/2008/2260/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44105
- http://aluigi.altervista.org/adv/ut3mendo-adv.txt
- http://aluigi.org/poc/ut3mendo.zip
- http://secunia.com/advisories/31265
- http://www.securityfocus.com/archive/1/494929/100/0/threaded
- http://www.securityfocus.com/bid/30430
- http://www.vupen.com/english/advisories/2008/2260/references
- https://exchange.xforce.ibmcloud.com/vulnerabilities/44105