CVE-2008-3286: Sierra Swat 4

Medium severity, CVSS 5.0. EPSS: 8.9% chance of exploitation in the next 30 days.

SWAT 4 1.1 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) VERIFYCONTENT or (2) GAMECONFIG command sent to the server before user session initialization, which triggers a NULL pointer dereference; or (3) a GAMESPYRESPONSE command followed by a long RS string.

Affected products

• Sierra Swat 4: up to and including 1.1

Published 2008-07-24. Last modified 2026-06-16.