CVE-2018-10531

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

Code injection

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

CVE-2018-10531

An issue was discovered in the America's Army Proving Grounds platform for the Unreal Engine. With a false packet sent via UDP, the application server responds with several bytes, giving the possibility of DoS amplification, even being able to be used in DDoS attacks...

CVE-2018-10531

The CVE-2018-10531 issue affects the America’s Army Proving Grounds platform (Unreal Engine). A false UDP packet prompts the application server to respond with extra bytes, enabling DoS amplification and potentially DDoS use, per Red Hat/NVD/NVD entries and related records. Documents validate the...

Epic Games Launcher Protocol Command Injection Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Microsoft Visual Studio with tools for Unreal Engine development installed. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a...

wiki.unrealengine.com XSS vulnerability

Open Bug Bounty ID: OBB-115496 Description| Value ---|--- Affected Website:| wiki.unrealengine.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

Epic Games Unreal Engine Logging Function - Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to...

Epic Games Unreal Engine 436 URL Directory Traversal Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6775/info It has been reported that a directory traversal vulnerability exists in several games using some versions of the Unreal Engine. It is possible for attackers to traverse outside of the game's installation directo...

Unreal Tournament 2004 "secure" Overflow (Linux)

No description provided by source. $Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of us...

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/31141/info Unreal Engine is prone to multiple remote format-string vulnerabilities. Attackers can exploit the issues to execute arbitrary code within the context of a client application that uses the vulnerable engine...

Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny...

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

漏洞成因： 没有正确处理内存分配异常，导致拒绝服务漏洞 下列使用了该引擎的应用存在漏洞： Unreal Tournament 3.1.3 Unreal Tournament 2003 Unreal Tournament 2004 Dead Man's Hand Pariah WarPath Postal 2 Shadow Ops exp： http://www.securityfocus.com/data/vulnerabilities/exploits/31205.zip 参考： http://www.securityfocus.com/bid/31205/exploit source...

Epic Games Unreal Engine 436 Client Unreal URL Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6774/info t has been reported that a memory corruption bug exists in games based on the Unreal Engine. Under some circumstances, when the game client connects to a server using a excessive length Unreal URL it may be...

Unreal Tournament 2004 (Windows) - 'secure' Remote Overflow (Metasploit)

$Id: ut2004secure.rb 10394 2010-09-20 08:06:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

Unreal Engine - ReceivedRawBunch() Denial of Service

Unreal Engine - ReceivedRawBunch Denial of Service source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games whic...

CVE-2010-2702

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

Buffer overflow

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

CVE-2010-2702

The vulnerability CVE-2010-2702 affects Unreal Engine 1, 2 and 2.5 used by multiple games (e.g., Unreal Tournament 2004/2003, Postal 2, Raven Shield, SWAT4). Description: a buffer overflow in UGameEngine::UpdateConnectingMessage during downloads can allow remote code execution via a long LEVEL fi...

CVE-2010-2702

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...