CVE-2007-4442

Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:N/I:N/A:P

EPSS

3.84% chance of exploitation in the next 30 days, 89th percentile

Published

2007-08-21

Updated

2024-08-07

Proof-of-concept exploits (1)

• http://aluigi.org/poc/unrwebdos.zip

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/30513

References

• CVE Record
• NVD entry

Related

• CVE-2007-4441
• CVE-2007-4443
• CVE-2007-4440
• CVE-2007-4444
• CVE-2007-4439
• CVE-2007-4445