CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.

Link	Resource
http://secunia.com/advisories/26506	Vendor Advisory
http://aluigi.org/adv/unrwebdos-adv.txt
http://aluigi.org/poc/unrwebdos.zip
http://www.securityfocus.com/bid/25374
http://securityreason.com/securityalert/3039
https://exchange.xforce.ibmcloud.com/vulnerabilities/36102
http://www.securityfocus.com/archive/1/477026/100/0/threaded

Configuration 1

cpe:2.3:a:epic_games:unreal_engine:2003:*:*:*:*:*:*:* cpe:2.3:a:epic_games:unreal_engine:2004:*:*:*:*:*:*:*

---

Published : 2007-08-21 12:17

Updated : 2018-10-15 09:35

---

NVD link : CVE-2007-4442

Mitre link : CVE-2007-4442

No products.

NVD-CWE-Other