Vulnerability record · CVE-2008-7011 · published 19 August 2009

CVE-2008-7011: Digital extreme pariah vulnerability

Digital Extreme · Pariah

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service (server exit) via multiple file downloads from the server, which triggers an assertion failure when the Closing flag in UnChan.cpp is set.

4.0 CVSS 2.0 Medium EPSS 2.2% · top 18.5% CWE-399 · CWE-399

4.0CVSS 2.0 base score

2.2%EPSS exploitation probability, 30 days

NoNot in CISA KEV

6Affected product versions listed by NVD

8References, 4 tagged exploit

16 Jun 2026Last modified by NVD

Description

AV:N/AC:L/Au:S/C:N/I:N/A:P

Affected products

6 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

Pariah Digital Extreme

Unreal Tournament Epic Games

Warpath Groove Games HDead Mans Hand Human Head Studios

Shadow Ops Red Mercury WPostal Whiptail Interactive

References

Link	Tags
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html	Exploit
http://osvdb.org/48293
http://www.securityfocus.com/archive/1/496399/100/0/threaded
http://www.securityfocus.com/bid/31205	Exploit
http://archives.neohapsis.com/archives/fulldisclosure/2008-09/0321.html	Exploit
http://osvdb.org/48293
http://www.securityfocus.com/archive/1/496399/100/0/threaded
http://www.securityfocus.com/bid/31205	Exploit

Track CVE-2008-7011 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2004-0608Unreal Engine UDP secure query buffer overflow allows remote code executionThe Unreal Engine, as used in numerous games including DeusEx, Unreal Tournament, Unreal Tournament 2003/2004, Postal 2, Rune, and others, mishandles…EPSS 74%analysed6 Dec 2004 5.0CVE-2008-7015Epic games unreal tournament memory buffer overflow vulnerabilityUnreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of …EPSS 2.8%19 Aug 2009 5.0CVE-2004-1958Epic games unreal engine vulnerabilityDirectory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in…EPSS 2.4%31 Dec 2004 8.8CVE-2010-0806Microsoft Internet Explorer Peer Objects use-after-free allows remote code executionInternet Explorer 6, 6 SP1 and 7 contain a use-after-free in the Peer Objects component (iepeers.dll), where an object is accessed after deletion, le…KEVEPSS 82%analysed10 Mar 2010 5.9CVE-2018-0180Cisco IOS Login Block feature denial-of-service via crafted login attemptsMultiple flaws in the Login Enhancements (Login Block) feature of Cisco IOS Software let an unauthenticated remote attacker trigger a reload of the d…KEVEPSS 4.9%analysed28 Mar 2018 5.9CVE-2018-0179Cisco IOS Login Block feature denial-of-service flawMultiple vulnerabilities in the Login Enhancements (Login Block) feature of Cisco IOS Software let an unauthenticated, remote attacker trigger a relo…KEVEPSS 4.9%analysed28 Mar 2018 6.3CVE-2018-0161Cisco IOS SNMP GET Request Causes Device RestartCisco IOS Software on certain Catalyst switches mishandles SNMP read requests for the ciscoFlashMIB object ID, causing a SYS-3-CPUHOG condition that …KEVEPSS 4.1%analysed28 Mar 2018 7.5CVE-2018-0156Cisco IOS Smart Install packet validation flaw causes device reloadCisco IOS and IOS XE Smart Install client switches fail to properly validate packet data received on TCP port 4786. An unauthenticated remote attacke…KEVEPSS 8.6%analysed28 Mar 2018

Source: NIST National Vulnerability Database (record CVE-2008-7011), CISA KEV, FIRST EPSS (scores of 2026-09-28). This page is refreshed as NVD updates the record.