CVE-2010-2702 | BDVDB-2026-42545 Detail

Description#

Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://osvdb.org/66039
http://secunia.com/advisories/40466
http://aluigi.altervista.org/adv/unrealcbof-adv.txt
http://aluigi.org/poc/unrealcbof.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/60142

Exploit#

No public exploit known

History#

Version 12010-07-12Record published in the CVE List.
Version 22024-08-07Most recent update recorded in the CVE List.