ID CVE-2008-7011
Summary The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.
References
Vulnerable Configurations
  • cpe:2.3:a:digital_extreme:pariah:*:*:*:*:*:*:*:*
    cpe:2.3:a:digital_extreme:pariah:*:*:*:*:*:*:*:*
  • cpe:2.3:a:epic_games:unreal_tournament:3:1.3:*:*:*:*:*:*
    cpe:2.3:a:epic_games:unreal_tournament:3:1.3:*:*:*:*:*:*
  • cpe:2.3:a:epic_games:unreal_tournament:2003:*:*:*:*:*:*:*
    cpe:2.3:a:epic_games:unreal_tournament:2003:*:*:*:*:*:*:*
  • cpe:2.3:a:epic_games:unreal_tournament:2004:*:*:*:*:*:*:*
    cpe:2.3:a:epic_games:unreal_tournament:2004:*:*:*:*:*:*:*
  • cpe:2.3:a:groove_games:warpath:*:*:*:*:*:*:*:*
    cpe:2.3:a:groove_games:warpath:*:*:*:*:*:*:*:*
  • cpe:2.3:a:human_head_studios:dead_mans_hand:*:*:*:*:*:*:*:*
    cpe:2.3:a:human_head_studios:dead_mans_hand:*:*:*:*:*:*:*:*
  • cpe:2.3:a:red_mercury:shadow_ops:*:*:*:*:*:*:*:*
    cpe:2.3:a:red_mercury:shadow_ops:*:*:*:*:*:*:*:*
  • cpe:2.3:a:whiptail_interactive:postal:2:*:*:*:*:*:*:*
    cpe:2.3:a:whiptail_interactive:postal:2:*:*:*:*:*:*:*
CVSS
Base: 4.0 (as of 11-10-2018 - 20:58)
Impact:
Exploitability:
CWE CWE-399
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW SINGLE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
cvss-vector via4 AV:N/AC:L/Au:S/C:N/I:N/A:P
refmap via4
bid 31205
bugtraq 20080916 Failed assertion in the Unreal engine
fulldisc 20080916 Failed assertion in the Unreal engine
osvdb 48293
Last major update 11-10-2018 - 20:58
Published 19-08-2009 - 10:30
Last modified 11-10-2018 - 20:58
Back to Top