CVEvulnerability
CVE-2010-2702
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-07-12
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-119
Description
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
Affected configurations
• epicgames unreal engine 1
• epicgames unreal engine 2
• epicgames unreal engine 2.5
• epicgames postal 2
• epicgames raven shield
• epicgames swat 4
• epicgames unreal tournament 2003
• epicgames unreal tournament 2004
Related
Weakness · CWE (1)
- CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness
References
- http://aluigi.altervista.org/adv/unrealcbof-adv.txt Exploit
- http://aluigi.org/poc/unrealcbof.txt Exploit
- http://osvdb.org/66039 osvdb.org
- http://secunia.com/advisories/40466 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60142 exchange.xforce.ibmcloud.com
- http://aluigi.altervista.org/adv/unrealcbof-adv.txt Exploit
- http://aluigi.org/poc/unrealcbof.txt Exploit
- http://osvdb.org/66039 osvdb.org
- http://secunia.com/advisories/40466 Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/60142 exchange.xforce.ibmcloud.com