CVEvulnerability

CVE-2004-1958

5.0 MEDIUM Published 2004-12-31 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2004-12-31
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N

Description

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.

Affected configurations

• epic games unreal engine 433 • epic games unreal engine 436 • epic games unreal tournament 451b • epic games unreal tournament 2003 2199 macos • epic games unreal tournament 2003 2199 win32 • epic games unreal tournament 2003 2225 macos • epic games unreal tournament 2003 2225 win32

References