Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

Bugtraq ID:	31205
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2008-7011
Remote:	Yes
Local:	No
Published:	Sep 16 2008 12:00AM
Updated:	May 07 2015 05:23PM
Credit:	Luigi Auriemma
Vulnerable:	Whiptail Interactive Postal 2 RED MERCURY Shadow Ops 0 Human Head Studios Dead Man's Hand 0 Groove Games WarPath 0 Epic Games Unreal Tournament 2004 0 Epic Games Unreal Tournament 2003 0 Epic Games Unreal Tournament 3 1.3 Digital Extreme Pariah 0
Not Vulnerable:

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

Unreal Engine is prone to a remote denial-of-service vulnerability because of an error in memory allocation.

An attacker could exploit this issue to crash applications that use the vulnerable engine and deny service to legitimate users.

The following applications using the engine are vulnerable:

Unreal Tournament 3.1.3
Unreal Tournament 2003
Unreal Tournament 2004
Dead Man's Hand
Pariah
WarPath
Postal 2
Shadow Ops

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/31205.zip

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Unreal Engine 'UnChan.cpp' Failed Assertion Remote Denial of Service Vulnerability

References:

• Unreal Engine Failed Assertion Denial of Service Vulnerability (Luigi Auriemma)
  
• Unreal Engine Homepage (Epic Games)
  
• Failed assertion in the Unreal engine (Luigi Auriemma )