CVE-2007-4442: Buffer Overflow
First published: Tue Aug 21 2007(Updated: )
Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Unreal Engine | =2003 | |
| Unreal Engine | =2004 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/26506
- http://aluigi.org/adv/unrwebdos-adv.txt
- http://aluigi.org/poc/unrwebdos.zip
- http://www.securityfocus.com/bid/25374
- http://securityreason.com/securityalert/3039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36102
- http://www.securityfocus.com/archive/1/477026/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2007-4442?
CVE-2007-4442 is classified as a high severity vulnerability that can lead to denial of service.
How do I fix CVE-2007-4442?
To fix CVE-2007-4442, update to the latest patch provided by Epic Games for Unreal Engine 2003 or 2004.
What types of systems are affected by CVE-2007-4442?
CVE-2007-4442 affects systems running Epic Games' Unreal Engine versions 2003 and 2004.
What are the potential consequences of exploiting CVE-2007-4442?
Exploitation of CVE-2007-4442 can result in an application crash, leading to a denial of service.
When was CVE-2007-4442 published?
CVE-2007-4442 was published in August 2007.
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/severity
- agent/references
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/epic games
- canonical/unreal engine
- version/unreal engine/2003
- version/unreal engine/2004