CVE-2004-1958

MEDIUM 5.0CVE-2004-1958 · Published 31/12/2004 · updated 16/06/2026

In short

CVE-2004-1958 is a MEDIUM (CVSS 5.0) vulnerability affecting unreal engine (epic games), unreal tournament (epic games), unreal tournament 2003 (epic games).
Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
unreal engine epic_games	`= 433= 436`	No fix yet
unreal tournament epic_games	`= 451b`	No fix yet
unreal tournament 2003 epic_games	`= 2199_macos= 2199_win32= 2225_macos= 2225_win32`	No fix yet

Description

Directory traversal vulnerability in manifest.ini in Unreal engine allows remote attackers to overwrite arbitrary files via .. (dot dot) sequences in a UMOD (Unreal MOD) file.

References

aluigi.altervista.org/adv/umod-adv.txt · Exploit
marc.info
securityfocus.com/bid/10196 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/15942

More vulnerabilities in unreal engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

In short

CVE-2004-1958 is a MEDIUM (CVSS 5.0) vulnerability affecting unreal engine (epic games), unreal tournament (epic games), unreal tournament 2003 (epic games).

Chance of exploitation in the next 30 days (EPSS): 2.4%, higher than 84.3% of all vulnerabilities.

No patched version is listed yet: follow the vendor's advisory in References.

Package

Affected versions

Patched versions

unreal engine

epic_games

= 433= 436

No fix yet

unreal tournament

epic_games

= 451b

No fix yet

unreal tournament 2003

epic_games

= 2199_macos= 2199_win32= 2225_macos= 2225_win32

No fix yet

More vulnerabilities in unreal engine

See all →