CVE-2004-1805: Medium severity Epic Games Unreal Engine vulnerability

Published Dec 31, 2004

Updated

Format string vulnerability in games using the Epic Games Unreal Engine 436 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via format string specifiers in class names.

Affected Software

3 affected components

Epic Games Unreal Engine=226f

Epic Games Unreal Engine=433

Epic Games Unreal Engine=436

Remediation

Patch Available

http://www.securityfocus.com/bid/9840

Event History

Dec 31, 2004

CVE Published

05:00 AM

May 10, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2004-1805?

The severity of CVE-2004-1805 is considered high due to its potential to cause a denial of service and execute arbitrary code.

How do I fix CVE-2004-1805?

To fix CVE-2004-1805, ensure that you are using an updated version of the Unreal Engine that addresses this format string vulnerability.

What types of software are affected by CVE-2004-1805?

CVE-2004-1805 affects games using Epic Games Unreal Engine versions 436, 226f, and 433.

What causes the vulnerability in CVE-2004-1805?

CVE-2004-1805 is caused by improper handling of format string specifiers in class names within the affected Unreal Engine versions.

Can CVE-2004-1805 lead to remote code execution?

Yes, CVE-2004-1805 can potentially allow remote attackers to execute arbitrary code by exploiting the format string vulnerability.