Description
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
References
- ut-packet-dos(11302) vdb-entry
- ut-negative-memory-corruption(11305) vdb-entry
- 6770 vdb-entry
- 6772 vdb-entry
- 20030205 Unreal engine: results of my research mailing-list
- 20030211 Re: Epic Games threatens to sue security researchers mailing-list
- ut-negative-udp-dos(12012) vdb-entry
- 20030513 UT2003 client passive DoS exploit mailing-list