CVE-2003-1432: Code Injection
Epic Games Unreal Engine 226f through 436 allows remote attackers to cause a denial of service (CPU consumption or crash) and possibly execute arbitrary code via (1) a packet with a negative size value, which is treated as a large positive number during memory allocation, or (2) a negative size value in a package file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1432?
CVE-2003-1432 is considered to have a high severity level due to its potential to cause denial of service and execute arbitrary code.
How do I fix CVE-2003-1432?
To fix CVE-2003-1432, ensure that you update to a patched version of Unreal Engine or Unreal Tournament 2003 that addresses this vulnerability.
What software versions are affected by CVE-2003-1432?
CVE-2003-1432 affects Unreal Engine versions 226f through 436 and Unreal Tournament 2003 version 2199 for both Linux and Windows.
What type of attack does CVE-2003-1432 allow?
CVE-2003-1432 allows remote attackers to perform denial of service attacks and potentially execute arbitrary code.
Can CVE-2003-1432 lead to a system crash?
Yes, CVE-2003-1432 can cause a system crash due to excessive CPU consumption resulting from specially crafted packets.