CVE-2003-1432 Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size valu...
HighCVSS 10.0
EPSS 7.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| epic games unreal engine | = 226f | No fix listed |
| epic games unreal engine | = 433 | No fix listed |
| epic games unreal engine | = 436 | No fix listed |
| epic games unreal tournament 2003 | = 2199_linux | No fix listed |
| epic games unreal tournament 2003 | = 2199_win32 | No fix listed |
| epic games unreal tournament 2003 | = demo_version_2206_linux | No fix listed |
| epic games unreal tournament 2003 | = demo_version_2206_win32 | No fix listed |
References
- 20030205 Unreal engine: results of my research mailing-list
- 20030211 Re: Epic Games threatens to sue security researchers mailing-list
- 20030513 UT2003 client passive DoS exploit mailing-list
- 6770 exploit vdb-entry
- 6772 exploit vdb-entry
- ut-packet-dos(11302) vdb-entry
- ut-negative-memory-corruption(11305) vdb-entry
- ut-negative-udp-dos(12012) vdb-entry