Unreal Engine - 'ReceivedRawBunch()' Denial of Service

source: https://www.securityfocus.com/bid/41737/info Unreal Engine is prone to a denial-of-service vulnerability. An attacker can exploit this issue to crash the affected server, resulting in denial-of-service conditions. The following games which are developed with Unreal Engine are affected:...

CVE-2010-2702

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

Buffer overflow

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

CVE-2010-2702

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

CVE-2010-2702

The vulnerability CVE-2010-2702 affects Unreal Engine 1, 2 and 2.5 used by multiple games (e.g., Unreal Tournament 2004/2003, Postal 2, Raven Shield, SWAT4). Description: a buffer overflow in UGameEngine::UpdateConnectingMessage during downloads can allow remote code execution via a long LEVEL fi...

CVE-2010-2702: Improper Restriction of Operations within the Bounds of a Memory Buffer

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary...

Unreal Engine 2.5 - UpdateConnectingMessage() Remote Stack Buffer Overflow (PoC)

Unreal Engine 2.5 - UpdateConnectingMessage Remote Stack Buffer Overflow PoC source: https://www.securityfocus.com/bid/41424/info Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficientl...

Unreal Engine 2.5 - 'UpdateConnectingMessage()' Remote Stack Buffer Overflow (PoC)

source: https://www.securityfocus.com/bid/41424/info Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer. Successful exploits can allow remote attackers to...

Unreal Tournament 2004 Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Unreal...

Design/Logic Flaw

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...

Authentication flaw

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

CVE-2008-7011

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

CVE-2008-7015

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...

CVE-2008-7011

The CVE-2008-7011 issue affects the Unreal Engine used by Unreal Tournament 3 (v1.3) and several other titles (UT2003/2004, Dead Man’s Hand, Pariah, WarPath, Postal2, Shadow Ops). The vulnerability allows remote authenticated users to trigger a denial of service (server exit) by issuing multiple ...

CVE-2008-7015

The CVE-2008-7015 entry affects Unreal Engine 3 bindings used by games such as Unreal Tournament 3 (1.3) and Frontlines: Fuel of War (1.1.1). The issue arises when a remote attacker sends a packet with a large length value, triggering a memory allocation failure that can cause the server to exit ...

CVE-2008-7011

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

CVE-2008-7015

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...

CVE-2008-7015: Improper Restriction of Operations within the Bounds of a Memory Buffer

Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...

CVE-2008-7011: Undefined Security Weakness

The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...

CVE-2008-6441

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...