CVE-2008-3410: Epic Games Unreal Tournament 3

Medium severity, CVSS 5.0. EPSS: 2.6% chance of exploitation in the next 30 days.

Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service (NULL pointer dereference and daemon crash) via a UDP packet in which the value of a certain size field is greater than the total packet length, aka attack 2 in ut3mendo.c.

Affected products

• Epic Games Unreal Tournament 3: up to and including 1.3; version 1.1 only; version 1.2 only

Published 2008-07-31. Last modified 2026-06-16.