156 matches found
CVE-2008-7015
The CVE-2008-7015 entry affects Unreal Engine 3 bindings used by games such as Unreal Tournament 3 (1.3) and Frontlines: Fuel of War (1.1.1). The issue arises when a remote attacker sends a packet with a large length value, triggering a memory allocation failure that can cause the server to exit ...
CVE-2008-7011
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...
CVE-2008-7011
The CVE-2008-7011 issue affects the Unreal Engine used by Unreal Tournament 3 (v1.3) and several other titles (UT2003/2004, Dead Man’s Hand, Pariah, WarPath, Postal2, Shadow Ops). The vulnerability allows remote authenticated users to trigger a denial of service (server exit) by issuing multiple ...
CVE-2008-7011: Undefined Security Weakness
The Unreal engine, as used in Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, and Shadow Ops, allows remote authenticated users to cause a denial of service server exit via multiple file downloads from the server, which triggers an assertion...
CVE-2008-7015: Improper Restriction of Operations within the Bounds of a Memory Buffer
Unreal engine 3, as used in Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1, and other products, allows remote attackers to cause a denial of service server exit via a packet with a large length value that triggers a memory allocation failure...
CVE-2008-6441
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...
CVE-2008-6441
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...
CVE-2008-6441
CVE-2008-6441 describes a format-string vulnerability in the Epic Games Unreal engine client used by multiple games, allowing remote servers to execute arbitrary code via (1) the CLASS parameter in a DLMGR command, (2) a malformed PKG, and possibly (3) the LEVEL parameter in a WELCOME command. Af...
CVE-2008-6441: Use of Externally-Controlled Format String
Format string vulnerability in the Epic Games Unreal engine client, as used in multiple games, allows remote servers to execute arbitrary code via 1 the CLASS parameter in a DLMGR command, 2 a malformed package PKG, and possibly 3 the LEVEL parameter in a WELCOME command...
Unreal Tournament 3 1.3 - Directory Traversal
Luigi Auriemma Application: Unreal Tournament 3 http://www.unrealtournament3.com Versions: 1.3 ONLY both build 3601 and 3614 older versions are safe Platforms: Windows and Linux Bug: directory traversal in the web interface Exploitation: remote, versus server Date: 21 Sep 2008 Author: Luigi...
Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service
Unreal Engine - UnChan.cpp Failed Assertion Remote Denial of Service source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that us...
Failed assertion in the Unreal engine
Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: the games which have been tested and resulted vulnerable are Unreal Tournament 3 1.3, Unreal Tournament 2003 and 2004, Dead Man's Hand, Pariah, WarPath, Postal2, Shadow Ops and possibly others. instead those which...
Unreal Engine - 'UnChan.cpp' Failed Assertion Remote Denial of Service
source: https://www.securityfocus.com/bid/31205/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. The...
Server termination in the Unreal engine 3
Luigi Auriemma Application: Unreal engine 3 http://www.unrealtechnology.com Versions: the bug affects various games which use the Unreal engine 3 like Unreal Tournament 3 1.3, Frontlines: Fuel of War 1.1.1 and so on Turning Point: Fall of Liberty is NOT vulnerable note: the proof-of-concept used...
Clients format strings in the Unreal engine
Luigi Auriemma Application: Unreal engine http://www.unrealtechnology.com Versions: almost any game which uses the Unreal engine is affected by this vulnerability except some like Unreal Tournament 2004, Dead Man's Hand and possibly other old games Platforms: Windows, Linux, Mac Bug: format strin...
Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service
Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service source: https://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use...
Unreal Engine 3 - Failed Memory Allocation Remote Denial of Service
source: https://www.securityfocus.com/bid/31140/info Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation. An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users. This...
Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities
Epic Games Unreal Engine 436 - Multiple Format String Vulnerabilities source: https://www.securityfocus.com/bid/31141/info Unreal Engine is prone to multiple remote format-string vulnerabilities. Attackers can exploit the issues to execute arbitrary code within the context of a client application...
CVE-2003-1432
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service CPU consumption or crash and possibly execute arbitrary code via 1 a packet with a negative size value, which is treated as a large positive number during memory allocation, or 2 a negative size value i...