CVE

Id
45286  
CVE No.
CVE-2010-2702  
Status
Candidate  
Description
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.  
Phase
Assigned (20100712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
493477 45286 CVE-2010-2702 MISC:http://aluigi.altervista.org/adv/unrealcbof-adv.txt  View
493478 45286 CVE-2010-2702 MISC:http://aluigi.org/poc/unrealcbof.txt  View
493479 45286 CVE-2010-2702 OSVDB:66039  View
493480 45286 CVE-2010-2702 URL:http://osvdb.org/66039  View
493481 45286 CVE-2010-2702 SECUNIA:40466  View
493482 45286 CVE-2010-2702 URL:http://secunia.com/advisories/40466  View
493483 45286 CVE-2010-2702 XF:unrealengine-ugameengineupdate-bo(60142)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
39164 JVNDB-2010-004949 HP ProCurve 2610 スイッチの In-band Agent におけるサービス運用妨害 (DoS) の脆弱性 HP ProCurve 2610 スイッチの In-band Agent には、サービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2010-2706 45286 6.1 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004949.html  View