NVD

Id
14151  
Name
CVE-2010-2702  
Description
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-18  
Published
2010-07-12  
Modified Date
2010-07-13  
Seq
2010-2702  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
78268 14151 CVE-2010-2702 http://aluigi.altervista.org/adv/unrealcbof-adv.txt  View
78269 14151 CVE-2010-2702 http://aluigi.org/poc/unrealcbof.txt  View
78270 14151 CVE-2010-2702 unrealengine-ugameengineupdate-bo(60142)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
38421 JVNDB-2010-004206 Unreal エンジンの UGameEngine::UpdateConnectingMessage 関数におけるバッファオーバーフローの脆弱性 Unreal Tournament、Postal、Raven Shield および SWAT などのゲーム製品で使用されている Unreal エンジンの UGameEngine::UpdateConnectingMessage 関数には、ダウンロードが有効になっている際、バッファオーバーフローの脆弱性が存在します。 CVE-2010-2702 45282 CVE-2010-2702 14151 9.3 http://jvndb.jvn.jp/ja/contents/2010/JVNDB-2010-004206.html 2010-07-12 2012-06-26 View