CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

CVE-2007-4442

CVE-2007-4442 concerns the Unreal Engine: a stack-based buffer overflow in the engine’s logging function (used by its internal web server) may be triggered by a request for a long .gif filename in the images/ directory. The root cause is described as a Unicode-to-ASCII conversion issue, potential...

CVE-2007-4443

The CVE-2007-4443 entry concerns the Windows UCC dedicated server for the Unreal engine (likely 2003/2004) where remote attackers can trigger a DoS by sending strings containing many 0x07 characters via requests to the images/ directory, the Content-Type header, a HEAD request, or other vectors. ...

CVE-2007-4443

The UCC dedicated server for the Unreal engine, possibly 2003 and 2004, on Windows allows remote attackers to cause a denial of service continuous beep and server slowdown via a string containing many 0x07 characters in 1 a request to the images/ directory, 2 the Content-Type field, 3 a HEAD...

CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service application crash via a request for a long .gif filename in the images/ directory, related to conversion from...

Epic Games Unreal Engine Logging Function - Remote Denial of Service

Epic Games Unreal Engine Logging Function - Remote Denial of Service source: https://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this...

Epic Games Unreal Engine Logging Function - Remote Denial of Service

source: https://www.securityfocus.com/bid/25374/info The Unreal Engine is prone to a remote denial-of-service vulnerability because the application fails to properly bounds-check user-supplied input. Successfully exploiting this issue allows remote attackers to corrupt application memory in a...

Unreal Tournament 2004 "secure" Overflow (Linux)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

Unreal Tournament 2004 "secure" Overflow (Win32)

This is an exploit for the GameSpy secure query in the Unreal Engine. This exploit only requires one UDP packet, which can be both spoofed and sent to a broadcast address. Usually, the GameSpy query server listens on port 7787, but you can manually specify the port as well. The RunServer.sh scrip...

CVE-2004-1805

Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in class names...

CVE-2004-1958

The CVE-2004-1958 entry describes a directory traversal vulnerability in the manifest.ini component of Unreal Engine, exploitable via .. sequences in a UMOD (Unreal MOD) file to overwrite arbitrary files. This indicates a remote-reachability issue affecting Unreal Engine’s handling of UMOD packag...

CVE-2004-1805

The CVE-2004-1805 issue targets games using the Epic Games Unreal Engine 436, describing a format string vulnerability in class names that enables remote attackers to cause a denial of service and potentially execute arbitrary code. The vulnerability appears to be exploitable over the network, wi...

CVE-2004-1805

Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via format string specifiers in class names...

CVE-2004-1958

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. dot dot sequences in a UMOD Unreal MOD file...

CVE-2004-0608

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier,...

CVE-2004-0608

CVE-2004-0608 is a buffer-overflow in the Unreal Engine’s GameSpy secure query over UDP that, when a long secure query value is received, can overwrite memory and allow remote code execution. The impact covers Unreal Engine-based games such as Unreal Tournament 2004 (before 3236) and other titles...

CVE-2004-0608

The Unreal Engine, as used in DeusEx 1.112fm and earlier, Devastation 390 and earlier, Mobile Forces 20000 and earlier, Nerf Arena Blast 1.2 and earlier, Postal 2 1337 and earlier, Rune 107 and earlier, Tactical Ops 3.4.0 and earlier, Unreal 1 226f and earlier, Unreal II XMP 7710 and earlier,...

Unreal Engine Secure Query Remote Overflow

The remote host was running a game server with the Unreal Engine on it. The game server is vulnerable to a remote attack which allows for arbitrary code execution. Note that Nessus disabled this service while testing for this flaw. C Tenable Network Security, Inc. include"compat.inc"; if...

[Full-Disclosure] Code execution in the Unreal Engine through \secure\ packet

Luigi Auriemma Application: Unreal Engine http://unreal.epicgames.com Vulnerable games: - DeusEx = 1.112fm - Devastation = 390 - Mobile Forces = 20000 - Nerf Arena Blast = 1.2 - Postal 2 = 1337 - Rune = 107 - Tactical Ops = 3.4.0 - TNN Pro Hunter ? - Unreal 1 = 226f - Unreal II XMP = 7710 - Unrea...

Arbitrary file overwriting in Unreal engine through UMOD

Luigi Auriemma Application: Unreal engine http://unreal.epicgames.com Versions: any game based on this engine that supports the UMOD installation. An example are Unreal Tournament = 451b and Unreal Tournament 2003 = 2225. A full list of vulnerable games is not available. Platforms: Windows and...