CVE-2008-3409: Epic Games Unreal Tournament 3

High severity, CVSS 7.5. EPSS: 11% chance of exploitation in the next 30 days.

Buffer overflow in Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (memory corruption and daemon crash) or possibly execute arbitrary code via a UDP packet containing a large value in a certain size field, followed by a data string of that size, aka attack 1 in ut3mendo.c.

Affected products

• Epic Games Unreal Tournament 3: up to and including 1.3; version 1.1 only; version 1.2 only

Published 2008-07-31. Last modified 2026-06-16.