CVE-2003-1432: Improper Control of Generation of Code

Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via 1 a packet with a negative size value, which is treated as a large positive number during memory allocation, or 2 a negative size value i...

Buffer overflow

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

Design/Logic Flaw

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

CVE-2007-5249

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

CVE-2007-5250

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

CVE-2007-5250

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

CVE-2007-5249

CVE-2007-5249 describes multiple buffer overflows in the Unreal Engine logging function (used by America’s Army and America’s Army Special Forces 2.8.2 and earlier) that occur when PunkBuster is enabled, allowing remote DoS via long PB_Y (to YPG on UDP 1716) or PB_U (to UCON on UDP 1716) packets....

CVE-2007-5249

Multiple buffer overflows in the logging function in the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allow remote attackers to cause a denial of service daemon crash via a long 1 PBY packet to the YPG server on UDP...

CVE-2007-5250

The CVE-2007-5250 entry concerns the Windows dedicated server for the Unreal engine used by America’s Army (and AA Special Forces 2.8.2 and earlier). The vulnerability allows remote attackers to cause a denial of service (server hang) by sending packets containing 0x07 characters or other unspeci...

CVE-2007-5250: Undefined Security Weakness

The Windows dedicated server for the Unreal engine, as used by America's Army and America's Army Special Forces 2.8.2 and earlier, when Punkbuster PB is enabled, allows remote attackers to cause a denial of service server hang via packets containing 0x07 characters or other unspecified invalid...

Stack overflow

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

Design/Logic Flaw

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...

CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

CVE-2007-4443

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...

CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

CVE-2007-4442

CVE-2007-4442 concerns the Unreal Engine: a stack-based buffer overflow in the engine’s logging function (used by its internal web server) may be triggered by a request for a long .gif filename in the images/ directory. The root cause is described as a Unicode-to-ASCII conversion issue, potential...

CVE-2007-4442: Undefined Security Weakness

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

CVE-2007-4443: Undefined Security Weakness

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...

CVE-2007-4443

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...

CVE-2007-4443

The CVE-2007-4443 entry concerns the Windows UCC dedicated server for the Unreal engine (likely 2003/2004) where remote attackers can trigger a DoS by sending strings containing many 0x07 characters via requests to the images/ directory, the Content-Type header, a HEAD request, or other vectors. ...