CVE-2010-2702 in Engine
要約 (英語)
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.
予約する
2010年07月12日
公開
2010年07月12日
ステータス
確認済み
エントリ
VulDB provides additional information and datapoints for this CVE:
| 識別子 | 脆弱性 | CWE | 悪用可 | 対策 | CVE |
|---|---|---|---|---|---|
| 4153 | Unreal Engine UpdateConnectingMessage メモリ破損 | 119 | 概念実証 | 公式な修正 | CVE-2010-2702 |