Login Request a demo
Unscored severity · published Jul 12, 2010
CVE-2010-2702
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal…
–
CVSS
4.9%
EPSS
No
On KEV
Description
Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
P2
Postal 2 · Epicgames
All versions, or not specified · source: NVD
RS
Raven Shield · Epicgames
All versions, or not specified · source: NVD
S4
Swat 4 · Epicgames
All versions, or not specified · source: NVD
UE
Unreal Engine · Epicgames
1; 2; 2.5 · source: NVD
UT
Unreal Tournament 2003 · Epicgames
All versions, or not specified · source: NVD
UT
Unreal Tournament 2004 · Epicgames
All versions, or not specified · source: NVD
Affected product
P2
Postal 2
Epicgames
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2010-2702
CVE.org
https://www.cve.org/CVERecord?id=CVE-2010-2702
Exploit
http://aluigi.altervista.org/adv/unrealcbof-adv.txt
Exploit
http://aluigi.org/poc/unrealcbof.txt
osvdb.org
http://osvdb.org/66039
Vendor Advisory
http://secunia.com/advisories/40466
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/60142