CVE-2008-6441

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...

CVE-2008-6441

CVE-2008-6441 describes a format-string vulnerability in the Epic Games Unreal engine client used by multiple games, allowing remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed PKG, and possibly (3) the LEVEL parameter in a WELCOME command. Af...

CVE-2008-6441: Use of Externally-Controlled Format String

Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...

Unreal Tournament 3 1.3 - Directory Traversal

Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server Date: 21 Sep 2008 Author: Luigi...

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service

Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that us...

Failed assertion in the Unreal engine

Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: the games which have been tested and resulted vulnerable are Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, Shadow Ops and possibly others. instead those which...

Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service

source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. The...

Server termination in the Unreal engine 3

Luigi Auriemma Application: Unreal engine 3 http://www.unrealtechnology.com Versions: the bug affects various games which use the Unreal engine 3 like Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1 and so on Turning Point: Fall of Liberty is NOT vulnerable note: the proof-of-concept used...

Clients format strings in the Unreal engine

Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: almost any game which uses the Unreal engine is affected by this vulnerability except some like Unreal Tournament 2004, Dead Man's Hand and possibly other old games Platforms: Windows, Linux, Mac Bug: format strin...

Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service

Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service source: https://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use...

Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service

source: https://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. This...

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities

Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities source: https://www.securityfocus.com/bid/31141/info Unreal Engine is prone to multiple remote format-string vulnerabilities. Attackers can exploit the issues to execute arbitrary code within the context of a client application...

CVE-2003-1431

Buffer overflow in Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service crash via a long host string in the Unreal URL...

CVE-2003-1432

Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via 1 a packet with a negative size value, which is treated as a large positive number during memory allocation, or 2 a negative size value i...

CVE-2003-1433

Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times...

CVE-2003-1431

CVE-2003-1431 affects the Epic Games Unreal Engine versions 226f through 436. The vulnerability is a buffer overflow triggered by a long host string in the Unreal URL, enabling remote attackers to cause a denial of service (crash). The provided documents describe the affected software and the bas...

CVE-2003-1433

The CVE-2003-1433 description is supported: Unreal Engine versions 226f through 436 fail to validate the challenge key, enabling remote attackers to exhaust the player limit by joining the game multiple times. The connected sources confirm this problem as a heap of remote-access issue without det...

CVE-2003-1432

Epic Games Unreal Engine versions 226f through 436 are affected by CVE-2003-1432. Remotely, an attacker can force denial of service (CPU usage or crash) and possibly execute arbitrary code via: (1) a packet with a negative size value treated as a large positive number during memory allocation, an...

CVE-2003-1432: Improper Control of Generation of Code

Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via 1 a packet with a negative size value, which is treated as a large positive number during memory allocation, or 2 a negative size value i...

CVE-2003-1433: Improper Authentication

Epic Games Unreal Engine 226f through 436 does not validate the challenge key, which allows remote attackers to exhaust the player limit by joining the game multiple times...