Remote Code Execution Vulnerability in Unreal Engine Products

CVE-2004-0608

What is CVE-2004-0608?

A vulnerability in the Unreal Engine allows remote code execution, enabling attackers to send specially crafted UDP packets containing a secure query with an excessively long value. This can lead to the overwriting of memory within the affected applications, posing significant security risks. Affected products include multiple games and applications that utilize the Unreal Engine, making it essential for users to apply available patches to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

Metasploit exploit module for CVE-2004-0608
Created by Rapid7

References