Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Unreal_engine | Epic_games | 226f (including) | 226f (including) |
| Unreal_engine | Epic_games | 433 (including) | 433 (including) |
| Unreal_engine | Epic_games | 436 (including) | 436 (including) |
References
- http://aluigi.altervista.org/adv/unrfs-adv.txt
- http://marc.info/?l=bugtraq\u0026m=107893764406905\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=107902755204583\u0026w=2
- http://secunia.com/advisories/11108
- http://www.securityfocus.com/bid/9840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15430
- http://aluigi.altervista.org/adv/unrfs-adv.txt
- http://marc.info/?l=bugtraq\u0026m=107893764406905\u0026w=2
- http://marc.info/?l=bugtraq\u0026m=107902755204583\u0026w=2
- http://secunia.com/advisories/11108
- http://www.securityfocus.com/bid/9840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15430