CVE-2010-2702
Published Jul 12, 2010
Last updated 7 years ago
Overview
- Description
- Buffer overflow in the UGameEngine::UpdateConnectingMessage function in the Unreal engine 1, 2, and 2.5, as used in multiple games including Unreal Tournament 2004, Unreal tournament 2003, Postal 2, Raven Shield, and SWAT4, when downloads are enabled, allows remote attackers to execute arbitrary code via a long LEVEL field in a WELCOME response to a download request.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 9.3
- Impact score
- 10
- Exploitability score
- 8.6
- Vector string
- AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
- nvd@nist.gov
- CWE-119
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:epicgames:unreal_engine:1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "09B8824F-CCAA-4756-BD0B-000CD162FAAE"
},
{
"criteria": "cpe:2.3:a:epicgames:unreal_engine:2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DB76B1A-D2AF-4BC7-B3FB-F9C3D8B7077A"
},
{
"criteria": "cpe:2.3:a:epicgames:unreal_engine:2.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "8C9F2B6F-7334-43F0-AE5E-70EDC79052A7"
}
],
"operator": "OR"
},
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:epicgames:postal_2:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D8DE3D5B-0A6C-4BD2-8AEF-DE4EFD93D137"
},
{
"criteria": "cpe:2.3:a:epicgames:raven_shield:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C4FC0308-0B20-467D-AB64-68F939E7785A"
},
{
"criteria": "cpe:2.3:a:epicgames:swat_4:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2478849A-9FAB-45B3-A99B-07CCD1981A28"
},
{
"criteria": "cpe:2.3:a:epicgames:unreal_tournament_2003:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "62D13823-D9BD-427E-8CC5-8590D0C3037C"
},
{
"criteria": "cpe:2.3:a:epicgames:unreal_tournament_2004:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6949154C-5F12-441D-8BAF-A096CE25DCCD"
}
],
"operator": "OR"
}
],
"operator": "AND"
}
]