CVE:CVE-2010-2702
CNNVD:CNNVD-201007-123
Unreal引擎是一款被很多游戏使用的网络游戏引擎。
使用在多个游戏(例如Unreal Tournament 2004、 Unreal tournament 2003、Postal 2、Raven Shield和SWAT4)中Unreal 引擎 1, 2和 2.5版本中的UGameEngine::UpdateConnectingMessage函数存在缓冲区溢出漏洞。当下载功能启用时，远程攻击者可以借助对下载请求的WELCOME响应的超长LEVEL域，执行任意代码。
solution:Upgrade epicgames unreal_engine to a higher version than 1,2,2.5,and avoid the version 1,2,2.5; Upgrade epicgames postal_2 to a higher version than *; Upgrade epicgames raven_shield to a higher version than *; Upgrade epicgames swat_4 to a higher version than *; Upgrade epicgames unreal_tournament_2003 to a higher version than *; Upgrade epicgames unreal_tournament_2004 to a higher version than *