← back
CVE-2007-4442

CVE-2007-4442

EPSS 3.8%
Stack-based buffer overflow in the logging function in the Unreal engine, possibly 2003 and 2004, as used in the internal web server, allows remote attackers to cause a denial of service (application crash) via a request for a long .gif filename in the images/ directory, related to conversion from Unicode to ASCII.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/30513unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://aluigi.org/adv/unrwebdos-adv.txthttp://aluigi.org/poc/unrwebdos.ziphttp://secunia.com/advisories/26506http://securityreason.com/securityalert/3039https://exchange.xforce.ibmcloud.com/vulnerabilities/36102http://www.securityfocus.com/archive/1/477026/100/0/threadedhttp://www.securityfocus.com/bid/25374