CVE-2007-4442: Buffer Overflow
First published: Tue Aug 21 2007(Updated: )
Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Epic Games Unreal Engine | =2003 | |
| Epic Games Unreal Engine | =2004 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/26506
- http://aluigi.org/adv/unrwebdos-adv.txt
- http://aluigi.org/poc/unrwebdos.zip
- http://www.securityfocus.com/bid/25374
- http://securityreason.com/securityalert/3039
- https://exchange.xforce.ibmcloud.com/vulnerabilities/36102
- http://www.securityfocus.com/archive/1/477026/100/0/threaded
- collector/nvd-historical
- collector/nvd-index
- agent/severity
- agent/author
- agent/weakness
- agent/references
- agent/type
- agent/event
- agent/description
- agent/first-publish-date
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/epic games
- canonical/epic games unreal engine
- version/epic games unreal engine/2003
- version/epic games unreal engine/2004