CVE-2010-2702 in Engine
Summary
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
Reservation
07/12/2010
Disclosure
07/12/2010
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 4153 | Unreal Engine UpdateConnectingMessage memory corruption | 119 | Proof-of-Concept | Official fix | CVE-2010-2702 |