• About Us
  • Search
  • Compatibility
  • Forums
  • Archive
  • Channels
  • Home
To take full advantage of all features you need to login or register. Registration is completely free and takes only a few seconds.
Warp2Search.net » News » March 2004 » Format String Bug in EpicGames Unreal engine

Format String Bug in EpicGames Unreal engine

Posted by: Newsfactory on: 03/11/2004 05:22 PM [ Print | 3 comment(s) ] · 2739 views

Security Focus reports that Luigi Auriemma found a bug in Epic's Unreal engine that was reported to EpicGames on 2th September 2003 and still nothing has been done about it! here's some of the games that are effected!

Unreal 1 Unreal II XMP Unreal Tournament Unreal Tournament 2003



Wheel of Time X-com Enforcer XIII Rainbow Six: Raven Shield Devastation DeusEx America's Army

The problem is a format string bug in the Classes management. Each time a client connects to a server it sends the names of the objects it uses (called classes).

If an attacker uses a class name containing format parameters (as %n, %s and so on) he will be able to crash or also to execute malicious code on the remote server.

Format String Bug in EpicGames Unreal engine

Digg it! Del.icio.us Technorati Furl Google Bookmarks

« Aliens vs. Predator · Format String Bug in EpicGames Unreal engine · InterVideo DVD Copy 2 Gold & Platinum »

Comment

vegetto34
Unregistered



#51870 Posted on: 03/11/2004 06:26 PM
LOL What an easy to exploit security hole. I might have some fun with this one.

"Yea uh... patch in 'two weeks'... "

Comment

Devourer
Unregistered



#51873 Posted on: 03/11/2004 07:18 PM
"was reported to EpicGames on 2th September 2003" That's the longest 2 weeks in history. :P

Comment

Chernobyl
Member



Posts: 65
Joined: 2003-05-03

#51877 Posted on: 03/11/2004 09:25 PM
They need to be fined for this sort of conduct, and big fines too. Plain irresponsible!

Warp2Search.net » News » March 2004 » Format String Bug in EpicGames Unreal engine

Latest News

· tinySpell 1.7.013
· Crysis Warhead Hardware Performance Review
· Tagan A+ Seenium Case Review
· DFI Lanparty DK P45-T2RS Plus Motherboard Review
· Silver Power SP-SS500 Review
· I-Rocks RF-6572 2.4GHz Wireless Keyboard Mouse Combo Review
· Reduce Your PC Running Costs
· Early Look - Gigabyte's GA-EX58-Extreme motherboard
· AXP Supernova 1000W PSU Review
· Advanced SystemCare 3 RC2 Beta
· a-squared (aČ) Free edition 3.5.0.29
· Gelid GC-1 Thermal Paste/Compound Review
· Intel G45 Express chipset Review
· BIOSTAR TPower N750 AM2+ Motherboard Review
· Evercool Transformer 6 CPU Cooler Review
· XFX 9800GTX+ Review
· Palit HD 4870 Sonic Review
· Thermaltake M9D Review
· OCZ ModXStream 600w Power Supply Review
· Kingwin Elite 3.5" SATA to USB/eSATA Hard Drive Enclosure Review

Nodes To Friends





Online Users

There are currently 484 user(s) online

© 2007-2008 Esselbach Internet Solutions
All products mentioned are registered trademarks or trademarks of their respective owners.
Read our disclaimer over here and our Privacy Policy over here
Managed with Contentteller(R) Business Edition, (C) 2002-2008 Esselbach Internet Solutions