What’s Vulnerable › Vulnerabilities

CVE-2008-7011

• Severity: medium (CVSS 4.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2009-08-19 · updated 2026-06-16
• Weakness: CWE-399

Description

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.

Affected products

• Digital Extreme Pariah: all versions
• Epic Games Unreal Tournament: 3-1.3, 2003, 2004
• Groove Games Warpath: all versions
• Human Head Studios Dead Mans Hand: all versions
• Red Mercury Shadow Ops: all versions
• Whiptail Interactive Postal: 2

References

• http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html
• http://osvdb.org/48293
• http://www.securityfocus.com/archive/1/496399/100/0/threaded
• http://www.securityfocus.com/bid/31205
• http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html
• http://osvdb.org/48293
• http://www.securityfocus.com/archive/1/496399/100/0/threaded
• http://www.securityfocus.com/bid/31205

Get alerted when CVE-2008-7011 or the next vulnerability affects your stack