CVE-2008-3396
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of...
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
Exploit likelihood
What each source reports
NVD Score used
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
- Record
CVE-2008-3396- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE List No score
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
- Record
CVE-2008-3396- Updated
- 2026-11-02
EUVDEUVD-2008-3382 No score
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
- Record
EUVD-2008-3382- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-5xh2-vf22-cccw No score
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of...
Unreal Tournament 2004 (UT2004) 3369 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a certain sequence of malformed packets.
- Record
GHSA-5xh2-vf22-cccw- Weakness
- CWE-20
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| Exploit-DB | Unreal Tournament 2004 - Null Pointer Remote Denial of Service | 2008-07-30 |
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, Exploit-DB, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2008-3396 is a medium vulnerability (CVSS 5.0) in Epic Games Unreal Tournament 2004, published July 31, 2008. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.71%, the 94th percentile. No source names a fixed version.
References
secunia.com/advisories/31266
aluigi.altervista.org/adv/ut2004null-adv.txt
securityfocus.com/archive/1/494935/100/0/threaded
vupen.com/english/advisories/2008/2259/references
aluigi.org/poc/ut2004null.zip
exchange.xforce.ibmcloud.com/vulnerabilities/44107
nvd.nist.gov/vuln/detail/CVE-2008-3396
github.com/advisories/GHSA-5xh2-vf22-cccw