medium4.0Public exploit code
CVE-2008-7011
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remot…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service2008-09-16 · dos · multiple · Verified
Impact
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Digital Extreme | Pariah | All versions |
| Epic Games | Unreal Tournament | Versions 3, 2003, 2004 |
| Groove Games | Warpath | All versions |
| Human Head Studios | Dead Mans Hand | All versions |
| Red Mercury | Shadow Ops | All versions |
| Whiptail Interactive | Postal | Version 2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html
- http://osvdb.org/48293
- http://www.securityfocus.com/archive/1/496399/100/0/threaded
- http://www.securityfocus.com/bid/31205
- http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html
- http://osvdb.org/48293
- http://www.securityfocus.com/archive/1/496399/100/0/threaded
- http://www.securityfocus.com/bid/31205