Epic Games Unreal Engine 436 - Client Unreal URL Denial of Service



EKU-ID: 27712 CVE: CVE-2003-1431;OSVDB-15397 OSVDB-ID:
Author: Auriemma Luigi Published: 2003-02-05 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home


source: https://www.securityfocus.com/bid/6774/info

t has been reported that a memory corruption bug exists in games based on the Unreal Engine. Under some circumstances, when the game client connects to a server using a excessive length Unreal URL it may be possible for the malformed URL to write over sensitive areas of stack memory causing the client to crash.

unreal://(261 chars)[EIP_byte2][EIP_byte1]
unreal://(258 chars)