Vulnerability in Epic Games Unreal Engine

CVE-2004-1958

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.

EPSS: 0.024 (83.4th percentile) — read the EPSS interpretation.

Affected products

Epic_games Unreal_engine — versions 433, 436
Epic_games Unreal_tournament — versions 451b
Epic_games Unreal_tournament_2003 — versions 2199_macos, 2199_win32, 2225_macos
N/a — versions n/a

References

cve@mitre.org (Exploit, x_refsource_MISC)
cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)