Epic Games Unreal Engine Multiple Format String Vulnerabilities

Bugtraq ID:	31141
Class:	Input Validation Error
CVE:	CVE-2008-6441
Remote:	Yes
Local:	No
Published:	Sep 11 2008 12:00AM
Updated:	May 07 2015 05:24PM
Credit:	Luigi Auriemma
Vulnerable:	Epic Games Unreal Engine 436 + ARUSH Devastation 390.0 + ARUSH Devastation 381.0 + ARUSH Devastation 380.0 + Atari Magic The Gathering: Battlegrounds 1.4 + Atari Magic The Gathering: Battlegrounds 1.3 + Atari Magic The Gathering: Battlegrounds 1.2 + Atari Magic The Gathering: Battlegrounds 1.1 + Atari Magic The Gathering: Battlegrounds 1.0 + Atari Nerf Arena Blast + Eidos DeusEx 1.2 + Eidos DeusEx 1.1 + Eidos DeusEx 1.0 + Human Head Studios Rune 1.0.1 + Human Head Studios Rune 1.0 + Microprose Software Star Trek: Klingon Honor Guard + Microprose Software Tactical Ops 3.4 + Microprose Software Tactical Ops 3.3 + Microprose Software Tactical Ops 3.2 + Microprose Software Tactical Ops 3.1 + Microprose Software Tactical Ops 3.0 + Rage Software Mobile Forces + Running With Scissors Postal 2 + Ubi Rainbow Six: Raven Shield 1.5 + Ubi Rainbow Six: Raven Shield 1.4 + Ubi Rainbow Six: Raven Shield 1.3 + Ubi Rainbow Six: Raven Shield 1.2 + Ubi Rainbow Six: Raven Shield 1.1 + Ubi Rainbow Six: Raven Shield 1.0 + United States Department of Defense America's Army 2.0 .0 + United States Department of Defense America's Army: SFAS 2.0 .0a + United States Department of Defense America's Army: SFAS 1.9 .0 Epic Games Unreal Engine 3 Epic Games Unreal Engine 226f
Not Vulnerable:

Epic Games Unreal Engine Multiple Format String Vulnerabilities

Unreal Engine is prone to multiple remote format-string vulnerabilities.

Attackers can exploit the issues to execute arbitrary code within the context of a client application that uses the vulnerable engine.

Epic Games Unreal Engine Multiple Format String Vulnerabilities

The following proof of concept is available:

• /data/vulnerabilities/exploits/31141.zip

Epic Games Unreal Engine Multiple Format String Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Epic Games Unreal Engine Multiple Format String Vulnerabilities

References:

• Unreal Engine Homepage (Epic Games)
  
• Clients format strings in the Unreal engine (Luigi Auriemma )