PT-2010-4224 · Epic Games+3 · Unreal Engine+5

Publicado 2010-07-12 · Atualizado 2017-08-17 · CVE-2010-2702

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unreal engine versions 1, 2, and 2.5

Description The issue is related to a buffer overflow in the UGameEngine::UpdateConnectingMessage function when downloads are enabled. This allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request. The affected games include Unreal Tournament 2004, Unreal Tournament 2003, Postal 2, Raven Shield, and SWAT4.

Recommendations For Unreal engine versions 1, 2, and 2.5, consider disabling the download feature to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the UGameEngine::UpdateConnectingMessage function to minimize the risk of exploitation. Avoid using the LEVEL field in the WELCOME response to a download request until the issue is resolved.

Exploit

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-2702

Produtos afetados

Postal 2

Raven Shield

Swat 4

Unreal Engine

Unreal Tournament 2003

Unreal Tournament 2004

Referências · 6

• 🔥 http://aluigi.altervista.org/adv/unrealcbof-adv.txt · Exploit
• 🔥 http://aluigi.org/poc/unrealcbof.txt · Exploit
• http://secunia.com/advisories/40466 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60142 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-2702 · Nota de Segurança
• http://osvdb.org/66039 · Nota