CVE-2004-1958: Medium severity Epic Games Unreal Engine vulnerability
Published Dec 31, 2004
·Updated
Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.
Affected Software
7 affected components
Epic Games Unreal Engine=433
Epic Games Unreal Engine=436
Epic Games Unreal Tournament=451b
Epic Games Unreal Tournament 2003=2199_macos
Epic Games Unreal Tournament 2003=2199_win32
Epic Games Unreal Tournament 2003=2225_macos
Epic Games Unreal Tournament 2003=2225_win32
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1958?
CVE-2004-1958 is classified as a high severity vulnerability due to its potential for remote file overwriting.
2
How do I fix CVE-2004-1958?
To fix CVE-2004-1958, ensure that you update to a patched version of the affected software from Epic Games.
3
Which software is affected by CVE-2004-1958?
CVE-2004-1958 affects multiple versions of Unreal Engine and Unreal Tournament 2003, including specific OS versions.
4
Can CVE-2004-1958 be exploited remotely?
Yes, CVE-2004-1958 can be exploited remotely by attackers using crafted UMOD files.
5
What type of vulnerability is CVE-2004-1958?
CVE-2004-1958 is a directory traversal vulnerability that enables attackers to access arbitrary files.