Unreal Engine 'UpdateConnectingMessage()' Remote Stack Buffer Overflow Vulnerability

Bugtraq ID:	41424
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 06 2010 12:00AM
Updated:	Jul 07 2010 05:07PM
Credit:	Luigi Auriemma
Vulnerable:	Whiptail Interactive Postal 2 Ubi Rainbow Six: Raven Shield 1.5 Ubi Rainbow Six: Raven Shield 1.4 Ubi Rainbow Six: Raven Shield 1.3 Ubi Rainbow Six: Raven Shield 1.2 Ubi Rainbow Six: Raven Shield 1.1 Ubi Rainbow Six: Raven Shield 1.0 Sierra Entertainment SWAT 4 1.1 Epic Games Unreal Tournament 2004 win32 Epic Games Unreal Tournament 2004 macOS Epic Games Unreal Tournament 2004 3369 Epic Games Unreal Tournament 2004 3334 Epic Games Unreal Tournament 2004 3236 Epic Games Unreal Tournament 2004 0 Epic Games Unreal Tournament 2003 Demo Version 2206 win32 Epic Games Unreal Tournament 2003 Demo Version 2206 linux Epic Games Unreal Tournament 2003 2225 win32 Epic Games Unreal Tournament 2003 2225 macOS Epic Games Unreal Tournament 2003 2199 win32 Epic Games Unreal Tournament 2003 2199 macOS Epic Games Unreal Tournament 2003 2199 linux Epic Games Unreal Tournament 2003 0 Epic Games Unreal Engine 2.5 Epic Games Unreal Engine 2 Epic Games Unreal Engine 1
Not Vulnerable:

Unreal Engine 'UpdateConnectingMessage()' Remote Stack Buffer Overflow Vulnerability

Unreal Engine is prone to a remote stack-based buffer-overflow vulnerability because it fails to properly bounds-check messages before copying them to an insufficiently sized memory buffer.

Successful exploits can allow remote attackers to execute arbitrary machine code in the context of the user running the application.

This issue affects games based on Unreal Engine 1, 2, and 2.5; other versions may be affected as well.

Unreal Engine 'UpdateConnectingMessage()' Remote Stack Buffer Overflow Vulnerability

The following proof of concept is available:

• /data/vulnerabilities/exploits/41424.txt

Unreal Engine 'UpdateConnectingMessage()' Remote Stack Buffer Overflow Vulnerability

Solution:
Currently we are not aware of any official vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Unreal Engine 'UpdateConnectingMessage()' Remote Stack Buffer Overflow Vulnerability

References:

• Home Page (Epic Games)
  
• unicode buffer-overflow in UpdateConnectingMessage (Luigi Auriemma)
  
• Unreal Engine Homepage (Epic Games)