PT-2010-4224 · Epic Games+3 · Unreal Engine+5

Published 2010-07-12 · Updated 2017-08-17 · CVE-2010-2702

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Unreal engine versions 1, 2, and 2.5

Description The issue is related to a buffer overflow in the UGameEngine::UpdateConnectingMessage function when downloads are enabled. This allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request. The affected games include Unreal Tournament 2004, Unreal Tournament 2003, Postal 2, Raven Shield, and SWAT4.

Recommendations For Unreal engine versions 1, 2, and 2.5, consider disabling the download feature to prevent exploitation until a patch is available. As a temporary workaround, restrict access to the UGameEngine::UpdateConnectingMessage function to minimize the risk of exploitation. Avoid using the LEVEL field in the WELCOME response to a download request until the issue is resolved.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2010-2702

Affected Products

Postal 2

Raven Shield

Swat 4

Unreal Engine

Unreal Tournament 2003

Unreal Tournament 2004

References · 6

• 🔥 http://aluigi.altervista.org/adv/unrealcbof-adv.txt · Exploit
• 🔥 http://aluigi.org/poc/unrealcbof.txt · Exploit
• http://secunia.com/advisories/40466 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2010-2702 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/60142 · Note
• http://osvdb.org/66039 · Note